Bank examiners and auditors constantly change their expectations. The result is you feel as if your information security practices are trying to hit a moving target while the boundaries shift constantly.

And let’s acknowledge the tests associated with bank examiners definitely fall into the “not fun” category.