Forum topic
We're doing a new IT risk assessment this year, so we’ll need to start with the population of “risk elements”. No doubt the process will be more of a struggle if the list is too long, too short, or otherwise not stratified properly. Might any of you have such a list that you could share? My hope is that I could learn from your approach to stratifying IT risks thanks very much in advance Link to delete content:
Link to edit content: |
Forum topic
Hianyone have a Reg CC audit program? if so, would you please send it to me or post it on the Forum?thanks, Link to delete content:
Link to edit content: |
Forum topic
We are getting ready to roll out online account opening. I have some concerns about management not feeling that signatures are necessary and just using a software id verification product. Do any of you offer this service and how do you deal with member id verification? Link to delete content:
Link to edit content: |
Forum topic
Does anyone know of or used an Enterprise Risk Management software besides Vital Insight? If so, could you send me the name of the product, vendor and contact information? Thank you. Link to delete content:
Link to edit content: |
Forum topic
Just wondering how credit unions with ERM programs and Internal Audit programs interact? They should be both independant functions, however they seem to me to be very interdependant... Just wondered how CUs with these programs felt. Best Regards,Tim Merwin Link to delete content:
Link to edit content: |
Forum topic
I am looking for a policy on cell phones that are associated with credit union employees. (Employees who use their personal cell phones for cu business.)You may respond directly to me. Thank You, Julie HaugInternal AuditorCollins Community Credit Union 1150 42nd ST NE PO BOX 10500Cedar Rapids, IA 52410-0500Phone: 319-294-6135Fax: 319-294-6137Email: jhaug@collinscu.org Link to delete content:
Link to edit content: |
Forum topic
I am looking for a policy on cell phones that are associated with credit union employees. (Employees who use their personal cell phones for cu business.)Thank you, Juliejhaug@collinscu.org Link to delete content:
Link to edit content: |
Forum topic
I'm looking to find out how people are testing their Credit Union's credit bureau reporting. As you may recall (or want to forget), periodic testing was added to the FACT Act about a year ago. My management team is scratching their heads on how to test this information & would like to hear what others are doing. I would definitely like to hear from those struggling, I mean, using Summit/Spectrum as their core processor. I appreciate any guidance you can provide on this topic.~Thanks! Link to delete content:
Link to edit content: |
Forum topic
Our SC, BOD and management are having a little difference of opinion. Recently an Ethics Policy was established for our volunteers, it has been tabled the last couple of months. There is a statement in the policy that states the BODs will investigate if the SC should violate a policy and vice versa if the BODs violate a policy. The SC feels that management should investigate any violation of policy.At your credit union, who is responsible for investigating violation of policy pertaining to your volunteers?One more item, who is responsible for enforcing policy and procedures pertaining to Link to delete content:
Link to edit content: |
Forum topic
Hello fellow credit union auditors!I was at a recent ACL training seminar where ODBC was discussed. Currently I get data files monthly which are put on an SQL server. The instructor said that I should request an ODBC driver so that my ACL software could connect real time to Episys and get the data I needed. This would be read only privileges so data integrity would be in tact.When I requested this from IT and they put in a ticket with Symitar the tech at Symitar wasn't sure what I really wanted.Has any credit union using Episys and using ACL software for data extraction and monitoring se Link to delete content:
Link to edit content: |