Information Security Management
Risk Identification
Threats

Vulnerabilities
Supervision of E-Banking Cybersecurity Risk and Resources required for Cybersecurity Readiness
Risk Measurement
Risk Mitigation
Policies, Standards, and Procedures
Technology Design
Control Types
Control Implementation
Inventory and Classification of Assets
Mitigating Interconnectivity Risk
User Security Controls
Physical Security
Network Controls
Change Management Within the IT Environment
End-of-Life Management
Malware Mitigation
Control of Information
Supply Chain
Logical Security
Customer Remote Access to Financial Services
Application Security
Database Security
Encryption
Oversight of Third-Party Service Providers
Business Continuity Considerations
Log Management
Risk Monitoring and Reporting
Metrics
Security Operations
Threat Identification and Assessment
Threat Monitoring

Incident Identification and Assessment
Incident Response
Effectiveness of Information Security Program
Assurance and Testing
Key Testing Factors
Types of Tests and Evaluations
Independence of Tests and Audits
Assurance Reporting