Security Compliance Associates website review program is based on the requirements outlined in the Interagency Guidance on Electronic Financial Services and Consumer Compliance and the Interagency Statement on Retail On-line PC Banking produced by the Federal Financial Institutions Examination Council (FFIEC) as well as FTC, FRS, FDIC, OTS, OCC and NCUA guidelines.
The Website Compliance Review will assess compliance of the institution's home page and all internally linked web pages. Security Compliance Associates will utilize multiple Internet browsers and web development tools to review the website for website construction and ease of navigation, possible security issues, and compliance with relevant state and federal laws and regulations, including the following:
• Insurance Disclosures
• FRS, FDIC, OTS, OCC and NCUA Rules and Regulations - Nondiscrimination Requirements (Fair Housing Act)
• FRS, FDIC, OTS, OCC and NCUA Rules and Regulations - Truth in Savings (Reg DD)
• FRS, FDIC, OTS, OCC and NCUA Rules and Regulations - Privacy
• Equal Credit Opportunity Act (Reg B)
• Home Mortgage Disclosure Act (Reg C)
• Consumer Leasing Act (Reg M)
• Electronic Funds Transfer Act (Reg E)
• Truth in Lending Act (Reg Z)
• Expedited Funds Availability Act (Reg CC)
• Non Deposit Investment Disclosure
• Child On-line Privacy and Protection Act (COPPA)
• Third Party Link Disclaimer
• Patriot Act
While examining the above regulations, SCA will also be evaluating the institution's website for compliance with FTC, FRS, FDIC, OTS, OCC and NCUA Rules and Regulations addressing Advertising and the Unfair and Deceptive Practices Act.
Microsoft yesterday issued 13 security updates that patched 22 vulnerabilities in Internet Explorer, Windows, Office and other software, including one that harked back two decades to something dubbed "Ping of Death."
Microsoft released 13 security bulletins, patching 22 vulnerabilities across its product line, including two critical updates affecting Internet Explorer and the Windows DNS Server. While Microsoft issued fewer updates this month, August was still marked as a busy month for system administrators.
Hackers flying the AntiSec banner today released what they said was 400 megabytes of internal data from a government cybersecurity contractor, ManTech, as part of their campaign to embarrass the FBI every Friday, as well as target other government agencies and their partners.
The U.S. Attorney's Office in Houston has brought charges against four men for stealing more than $400,000 as part of an ATM skimming scam targeting local banks.
Morgan Stanley Smith Barney is the latest company behind Sony and Epsilon to have its customers' personal data compromised.
A gang that made more than $72m (£45m) peddling fake security software has been shut down in a series of raids.
