Financial Services General
-
Microsoft 365 – Getting More for Your Investment
This blog was authored by my colleague Grant Rolfes – Assurance Manager, Financial Institutions Community banks and credit unions have continued to grow accustomed to the ever-changing landscape of the financial institution industry. From additional regulations, staffing challenges, and a volatile interest rate environment, many financial institutions are looking for solutions to increase the efficiency […]
-
Best practices for Business Continuity
Depending on the organization, business continuity is something that is often considered to be more of a checklist task rather than a part of a strategic initiative. Business Continuity Planning (BCP) requires a collaborative effort of the entire organization and as a result the attention of key executives from all divisions to develop.
-
State Pass-through Entity Tax Election – Should Your S Corporation Bank Make the Election?
With Ohio being the latest state to pass legislation allowing a pass-through entity tax (PTET) election in June 2022, nearly 30 states now allow S corporations and partnerships (pass-through entity or PTE) to be assessed an elective entity-level tax. This workaround is in response to the Tax Cuts and Jobs Act (TCJA) limiting the state and local tax (SALT) deduction for individuals who itemize to $10,000 through tax year 2025. Is it beneficial for your S corporation bank to make the PTET election?
-
BSA / OFAC Matters: New Sanctions Against Russia and Belarus
On May 8, 2022, by the United States, through the Office of Foreign Assets Control (OFAC), introduced new sanctions against Russia and Belarus . The new sanctions will take effect on June 7, 2022. Read on to learn more.
-
What You Should Know About the FTC Updates to the GLBA Standards for Safeguarding Customer Information Rule
Amendments to the Standards for Safeguarding Customer Information incorporate five key compliance changes for financial institutions. The new Rule provides additional detail to existing information security program criteria, increases accountability for program reporting, expands upon the definition of a financial institution, incorporates additional terminology definitions, and offers an exemption for smaller institutions.
-
The Importance of a Risk Based Audit Plan
What is your process to create your internal audit plan? Gone are the days of pulling together an internal audit plan on the fly basing your decision on a rotational schedule, auditable areas that had the most exceptions in the previous year, or what areas may fit into your budget.
-
Will the Cyber Incident Reporting for Critical Infrastructure Act of 2022 help or confuse Financial Institutions?
Recent legislation drives 72-hour timeline for notification of data breach and 24-hour notification of ransomware payment.
-
Digital / Online Payment Systems Risk
There are several payment systems available today to enhance the ease and convenience of making financial transactions. Payment systems continue to be developed and offered by both financial and non-financial institutions with just a few clicks to authenticate and transmit funds. The audience of these newly introduced applications are dependent upon the respective vendors to ensure that all required controls have been implemented to protect the data at rest as well as during transmission. Regulatory bodies have also addressed these risks through additional compliance requirements, and established frameworks continue to heighten industry standards to further guide organizations to reduce risk to an acceptable level.
-
Computer-Security Incident Notification Requirements
In fall 2021, the banking agencies issued a final ruled regarding computer-security incident notifications. See how this new rule impacts your bank.
-
Payment Systems & Cybersecurity
In an effort to push more capabilities and flexibility to members and customers, financial institutions have embraced automated payment platforms such as FedLine and SWIFT. These services make it easy to exchange funds between individuals and businesses across the country and across borders. Naturally, with the expanded use of these technologies, the cybersecurity risks that correspond to these technologies increase as well. The risks not only threaten the institutions that use these services, but they threaten the organizations that provide them