A policy you can actually run
Give Leela a policy. It finds the obligations and takes on the ones it can.
Know the vendors and systems you depend on, and what happens when one fails.
Vendor Management
Know every vendor you depend on, how much risk each one carries, and prove you looked before you signed and keep looking after. Your sponsor bank inherits the risk of your critical vendors, so it approves them, examines them, and expects notice when they change.
Tiered diligence before engagement, sponsor bank approval for critical providers, annual reviews and attestations, quarterly reporting
9 obligations · Leela can help with 8
4 runs or monitors · 4 prepares for review
Incident Response
Know what to do in the first hour of a breach or outage, who decides, and who has to be told by when. The sponsor bank owes its regulator a 36-hour notice, so your clock is shorter than you think, and the incident log is what proves you met it.
Same-day triage, containment within 30 minutes to 8 business hours by severity, immediate and 4-hour bank notices, daily updates, closure report in 10 business days, annual tabletop
9 obligations · Leela can help with 6
3 runs or monitors · 3 prepares for review
Insurance information security
Protect insurer systems and nonpublic information.
Track the controls, evidence and open scope questions for New York cybersecurity.
4 obligations · Leela can help with 3
1 runs or monitors · 2 prepares for review