AboutWeb develops Cybersecurity Assessment Tool

As part of their contract with the Comptroller of the Currency, AboutWeb developed a Cybersecurity Assessment Tool for Federal Financial Institutions Examination Council (FFIEC).  The tool helps financial organizations identify their risks and ascertain their cybersecurity maturity based on the principles of the FFIEC IT Examination Handbook, the National Institute of Standards and Technology (NIST). Cybersecurity Framework, as well as industry accepted cybersecurity practices. 

The tool allows organizations to identify their inherent risk based on five categories:
*    Technologies and Connection Types
*    Delivery Channels
*    Online/Mobile Products and Technology Services
*    Organizational Characteristics
*    External Threats


Then it evaluates the Cybersecurity Maturity level of the organization in five domains:
*    Cyber Risk Management and Oversight
*    Threat Intelligence and Collaboration
*    Cybersecurity Controls
*    External Dependency Management
*    Cyber Incident Management and Resilience


The tool is used by banks and financial institutions to improve their management of cyber risks and improve their cybersecurity policies, procedures, and controls.