Back to Blog

User Access Reporting Frequency

By Finosec

November 10, 2021

Get notified on new insights from Finosec now!

Be the first to know about new Finosec blogs to grow your knowledge of the cybersecurity governance industry today!

User access reviews can be a complex, time consuming process. Coupled with the regulatory expectations regarding these reviews and their frequency, they prove to be an arduous task that is far too often hindered by reliance on legacy systems. We believe everyone deserves a simple approach to cybersecurity, and user access reviews are no exception. President and CEO Zach Duke asks some questions regarding user access, and Finosec would like to hear your feedback on your experiences and opinions on this matter. Watch the video below for more information.

When considering high risk systems such as core processing and ACH, how often should user access reviews be completed? Annually? Quarterly? More frequently? Conducting a thorough review of every user and their access is vital to confirm that the principle of least privilege is being followed and that only those who need access are granted it. But is it possible that your frequency is obstructed by the complexity of the process? The reports can be hundreds or even thousands of pages long, so we believe a simplified process may make the frequency, whatever it may be, seem less daunting. For more information on how Finosec comes along side your institution to simplify User Access Reporting, visit our User Access Page at https://finosec.com/solutions/user-access-reporting.

Share your thoughts in the survey here, and you will be entered for a chance to have $250 donated to the charity of your choice (selected in the survey). We would love to hear from you! The results will be shared on Friday, November 12th in Finosec Academy!

More from Finosec

Integrating FFIEC Authentication Guidance: A Blueprint for Your Next Exam With Insights from Recent Regulatory Actions

Integrating FFIEC Authentication Guidance: A Blueprint for Your Next Exam With Insights from Recent Regulatory Actions

The Federal Financial Institutions Examination Council (FFIEC) Authentication Guidance update in August 2021 has marked a significant step towards enhancing authentication and security access measures within financial institutions. This update expanded upon previous handbooks from 2005 and 2011, emphasizing a broader scope that now includes employees, third-party vendors, and system-to-system communications via APIs.

The Best Defense Against Ransomware

The Best Defense Against Ransomware

Beth Sumner, our VP of Customer Success, recently had the opportunity to discuss ransomware attacks and the importance of community bankers staying vigilant against these crimes in Independent Banker.  While the number of ransomware attacks continues to increase, so do the sums demanded by the attackers.

Succession Planning: Essential for Sustaining Information Security

Succession Planning: Essential for Sustaining Information Security

In today’s world where cyber threats evolve rapidly, the challenge of replacing an Information Security Officer (ISO) underscores a critical issue: the cybersecurity job market is scorching, yet talent is scarce. This gap has turned recruitment into a high-stakes game for financial institutions, where the departure of an ISO exposes vulnerabilities and regulatory risks. With remote work expanding the competition for skilled professionals, the importance of strategic succession planning has never been more acute, ensuring that institutions remain fortified even in the face of staffing changes.

Partnering for Peace of Mind and Effective Oversight

Partnering for Peace of Mind and Effective Oversight

Pendleton Community Bank, a $700 Million Dollar Bank with 133 Employees in Franklin, WV, led by CEO Bill Loving, faced a critical challenge when their Information Security Officer departed, leaving a significant void in their oversight capabilities. Their goal was clear: establish an effective process for information security governance and cybersecurity oversight to ensure compliance and peace of mind.

Talk To An Expert Now
Talk To An Expert Now 770.268.2765