Policy Products

Safe Systems, Inc. offers policy products customized for your financial institution, through our partner company. Our policy products help you address FFIEC regulations and meet the recommended and required standards set forth by the bank regulatory agencies. Due to our exclusive focus on community financial institutions, our policies have been lauded by financial institutions and examiners for their thoroughness and regulatory relevance, as it applies to the financial sector.

Information Security Policy

Financial institutions need written policies and procedures to address regulatory expectations. The Information Security Program Manual is designed to assist your institution and personnel in protecting and managing the integrity of your customer information according to Gramm-Leach-Bliley regulatory rules and FFIEC standards.

The manual addresses a financial institution’s commitment that it has an affirmative and continuing obligation to respect the privacy of its customers and to protect the security and confidentiality of those customers non-public personal information. The Board of Directors must accept the responsibility for this commitment and these guidelines provide a framework to enable your institution to effectively administer a solid Information Security Program.

Specific sections include the following:

  • Management and personnel structure and responsibilities
  • Customer Information Risk Assessment Matrix
  • Service provider oversight and procedures Matrix
  • Employee training guidelines and policies
  • Program review guidelines
  • Program testing guidelines
  • Incident response procedures and documentation
  • Patch management procedures and documentation


Network and Internet Policy

The manual includes guidelines to minimize the risks associated with technology including Internet and email activities. There is detailed information regarding how to structure your institution’s organizational management to effectively address key processes with a proper separation of duties to meet prudent management standards.

Specific sections include the following:

  • Management and personnel structure
  • Internet security and configuration standards
  • Risk management processes
  • Internal system audit and server recovery testing procedures
  • Purchasing guidelines and approval levels
  • Software licensing rules
  • Software virus protection requirements
  • Security issues for software, network access, and vendor access to systems
  • Backup procedures and schedules
  • Storage requirements for software, backup tapes, and manuals
  • Documentation and training standards
  • Individual personnel use rules and signoff forms
  • Hardware and software inventory requirements
bottom bar Terms of Use Privacy Policy Site Map