I help compliance officers, risk management officers, and information security officers in banks to do operational risk assessments that are based on guidance from the regulators, including the Federal Financial Institutions Examination Council, the Federal Deposit Insurance Corporation, and the Consumer Financial Protection Bureau.The risk assessments cover Information Technology and cybersecurity, online/E-banking, GLBA 501b Safeguarding Customer Information, Fair Lending, Identity Theft Red Flags, and BSA/AML, I start an assessment using online surveys that are tailored to the management positions within the Bank and their roles and responsibilities (e.g. CIO/Director of IT, network manager, BSA Officer, contracts manager). Questions in the surveys are based on the controls and control features in the regulator guidance. After an initial planning session the on-line controls surveys are available immediately, so all managers can start responding at times convenient to them and across multiple sessions. Managers send supporting documentation for their responses to me via email (ProtonMail, with End-To-End Encryption available) or by uploading to a secure Managed File Transfer system. Survey responses are stored securely (SurveyMonkey).Reports follow the structure of regulator examination work programs, but are customized to the Bank - your products, information systems, vendors, departments, and customer and transaction volumes. Not boilerplate.The online survey responses provide documentation of bank practices; reports include descriptions of controls, select control features, and references to the Bank’s policies, standards, and procedures. And the workpapers are examiner- and auditor-ready, and can also be used for new employee orientation.If you would like to discuss any of the above in more detail, please feel free to message me on LinkedIn or contact me:Email: john@firiskassessment.comPhone: 833 434 7475Website: FIRiskAssessment.com