Performed IT examinations to include review of IT examination core modules, information security, and cyber security to evaluate a full range of structures that support institutional IT programs.Assessed processes to assure existing and new IT systems meet cybersecurity and operational risk requirements and are compliance with governing laws and regulations.Applied a working knowledge of banking and regulatory environments, particularly in relation to cybersecurity, data protection laws, and regulations to anticipate, identify, evaluate, mitigate, and minimize risks associated with IT systems and architecture vulnerabilities.. Reviewed IT governance structures such as strategic plans, management reporting structures, policies, procedures, and risk assessments.Evaluated management's ability and willingness to correct issues identified in formal and informal enforcement actions, in previous examinations, and in audits related to information technology.Conducted meetings with financial institution management, boards of directors, and others to: make corrective action recommendations for deficiencies; provide support for ratings; inform management of potential enforcement actions; answer questions; and to collect management’s response to corrective actions recommended in the Report of Examination.Prepared IT examination planning memos, FDIC Reports of Examination (to include summary comments and recommendations), InTREx workpapers, and exit agendas for management and board exit meetings.

With a team of researchers, an examination was conducted of the cyber security legislation of all 50 States in America and the American Federal GovernmentWith the compiled research, different analysis’ were performed to produce meaningful informationFindings were presented to the State of Indiana as considerations for their state cyber security policies and legislation