You could try here http://auditor.forumup.org/index.php?mforum=auditor or
here http://www.auditnet.org/ also as 2 key sites that may be able to help.
______________________________________________
-----Original Message-----
From: Lila Buchalski [mailto:lbuchalski@iconsinc.com] On Behalf Of Versace,
Michael
Sent: Thursday, 27 October 2005 5:11 AM
To: 'CoreAppSecurity'
Cc: security-management@securityfocus.com
Subject: RE: bank audit checklist
A better option is ISO17799 - code of practice for information security
Michael Versace
Fidelity Investments
Risk Oversight
617-392-8202(o)
617-794-0425(m)
michael.versace@fmr.com
This e-mail, and any attachments hereto, are intended for use by the
addressees only and may contain information that is (1) protected by the
attorney-client privilege, (2) attorney work product, (3) confidential
information of FMR Corp. and/or its affiliates and/or subsidiaries,
and/or (4) proprietary information of FMR Corp. and/or its affiliates
and/or subsidiaries. If you are not the intended recipient of this
e-mail, or if you have otherwise received this e-mail in error, please
immediately notify me by telephone (you may call collect), or by e-mail,
and please permanently delete the original, any print outs and any
copies of the foregoing. Any dissemination, distribution or copying of
this e-mail is strictly prohibited.
-----Original Message-----
From: CoreAppSecurity [mailto:CoreAppSecurity@Bankinfosecurity.com]
Sent: Wednesday, October 26, 2005 11:26 AM
To: Versace, Michael
Subject: RE: bank audit checklist
It depends on how detailed you want to get. The Payment Card Industry
Data Security Standards may be an option.
-----Original Message-----
From: Coreappsecurity Mailing List
[mailto:CoreAppSecurity@bankinfosecurity.com]
Sent: Wednesday, October 26, 2005 8:41 AM
To: Estrada, Manny
Subject: FW: bank audit checklist
I saw this post on the security-management@securityfocus.com mailing
list and thought maybe our list could help.
-Moderator
CoreAppSecurity@BankInfoSecurity.com
-----Original Message-----
From: sectraq@gmail.com [mailto:sectraq@gmail.com]
Sent: Monday, October 24, 2005 5:35 PM
To: security-management@securityfocus.com
Subject: bank audit checklist
hey all,
i donno how it happened but i ended up in the middle of a project to
audit the information security system of a bank :)
now since ive never done this before and i dont have much time to
prepare i thought the quickest way is to find/develop some
questionnaires. So i would appreciate any pointers on the topic. if
there are ready made questionnaires on auditing IS of banks that would
be excellent too. if anybody has other suggestions on how to tackle this
dump i got myself
in, am totally open to ur thoughts.
thnx
************************************************************************
********
NOTICE: This electronic mail message and any attached files are
confidential. The information is exclusively for the use of the
individual
or entity intended as the recipient. If you are not the intended
recipient,
any use, copying, printing, reviewing, retention, disclosure,
distribution
or forwarding of the message or any attached file is not authorized and
is strictly prohibited. If you have received this electronic mail
message
in error, please advise the sender by reply electronic mail immediately
and permanently delete the original transmission, any attachments and
any copies of this message from your computer system.
************************************************************************
********
