Blog

Success Story: Los Alamos National Bank

Natasha August 26th, 2010 View Comments

At A Glance

Organization: Los Alamos National Bank (LANB)

Industry: Banking – LANB provides full-service banking (including deposit accounts, consumer, safe deposit box rentals; commercial and real estate loans; international services including currency exchange and wires; trust and investment services).

Solution:

  • Comprehensive IT FFIEC/COBIT audit
  • Vulnerability Testing
  • Penetration Testing
  • Review of technology department’s services, security, infrastructure and future objectives

Benefits:

  • Improved Security — both physical and information
  • Continuous Compliance with FFIEC
  • Improved Risk Awareness Across the Bank
  • Refined Business Processes, Standards and Policies

The key to our success in any endeavor, whether regulatory requirement or need based, is the importance of finding a partner that understands our needs, collaborates and communicates well the needs and potential solutions to the challenges we are faced with.”  Michelle Sturgeon, IT Group of LANB

Los Alamos National Bank (LANB) was established in June 1963 by a group of local investors who saw the need for a convenient, full-service community bank.  Now one of the largest and strongest banks in the state of New Mexico, LANB continues to be locally owned and operated by Trinity Capital Corporation (TCC), a one-bank holding company.  LANB has 6 locations in Northern New Mexico, provides careers for over 300 banking professionals and current assets over $1.6 billion.  In November of 2000, Los Alamos National Bank was the first corporation in New Mexico, as well as the first bank in the nation, to be awarded the Malcolm Baldrige National Quality Award.  They are committed to their customers and to those activities that foster a better quality of life in the communities they serve.

“Like all financial institutions, we face ever changing regulatory requirements and pressures.” said Michelle Sturgeon of the LANB IT Group.  “…our organization was growing rapidly and the direction and complexity of our technology and services were also changing.  In an effort to ensure strong implementation, proper risk management and best practices were in place, it was determined that a knowledgeable 3rd party should be brought in for an objective look at the services, security, infrastructure and future direction of the technology department.” LANB’s goal is to provide individuals with the best financial products available, combined with excellent customer service.  Excellent customer service entailed secure banking and ensuring they minimized any risks to their customer’s information. In an information age they needed to find a solution that would help them do this.

The Garland Group (TGG) delivered a comprehensive IT FFIEC/COBIT audit.  This included providing LANB with a thorough audit and risk management evaluation to ensure they were following effective information technology (IT) processes.  TGG also provided LANB with an overall risk profile of their bank so they could understand how their processes and technologies impact their business operations and implement measures to mitigate risk.  TGG has also completed internal vulnerability testing and external penetration testing for LANB.

“The turnaround time has always been satisfactory and we are very happy with the service [TGG] has provided us,” said Sturgeon. The key to our success in any endeavor, whether regulatory or need based, is the importance of finding a partner that understands our needs, then collaborates and communicates those needs and potential solutions to our challenges.  TGG is respected by our regulators, industry peers and are constantly up to date on industry trends, developments and solutions.”

The Garland Group used its expertise to deliver improved security – physical and information, business processes, configurations and policies at LANB.  Los Alamos National Bank also implemented RiskKey and employs it for their IT Audits to monitor and track supporting documents and create an audit history.

The Garland Group ensured that LANB was compliant with their changing regulatory environment. “…[The Garland Group] has made us better.” said Sturgeon. “Their solutions provided us with the competent advice we needed to maintain our edge in a dynamic regulatory environment.  Whether it has been in our approach, awareness or solution implementations,  TGG helps us maintain the edge we need to successfully operate in this dynamic environment filled with risks that did not exist a few years ago.”

Los Alamos National Bank has been a client for over five years and continues to use The Garland Group today for their annual third party information technology audits.

  • Print
  • Digg
  • Twitter
  • Facebook

Webinar – Social Media and Compliance Part I

Brad August 9th, 2010 View Comments

Thanks to all that were able to attend our webinar last Friday on Social Media and Compliance. It was our highest attended to date. If you are wanting the slides for the presentation, you can download the PDF here. Next month, September 3rd, we will be continuing this topic by showing some examples of policies and technologies that are affecting this space.

Thanks everyone!

  • Print
  • Digg
  • Twitter
  • Facebook

Electronic Workpapers & Preparing for an Audit

dan August 2nd, 2010 View Comments

Let me begin by introducing myself, I’m Dan Nerada and was very excited to accept a position with The Garland Group earlier this year. I come to The Garland Group with over twenty-five plus years internal bank audit experience. My years in banking consisted in working for one south Texas bank and two banks within the north Dallas area. During my banking years, I spent the entire time as an Internal Audit manager. Needless to say, switching from an internal bank auditor, to an external IT auditor has enlightened me to see both sides of the audit experience.

Looking back, whenever it was time to prepare for an external audit, document preparation was always a major event! I would spend days, even weeks, gathering information and camping out at a copy machine, only to run out of paper! After all that copying, now it was time to arrange all this information in some logical order. Needless to say, having information in order before the auditors arrived would save a great deal of time and hopefully make the audit run smoother. As I have now experienced from the other side, that remains true. I can definitely say preparation sets the tone for the entire engagement.

My last engagement as an internal bank auditor introduced me to RiskKey provided by The Garland Group. This program truly cut down what use to be weeks of document preparation to simply only a few hours of downloading documents. It was simple, quick and efficient, and this is only one of the applications available within RiskKey. As a prior internal bank auditor, efficiency is the key to run a productive department and also in preparing for an external audit. Checkout RiskKey, it’s a tool that will increase your department’s efficiencies.

  • Print
  • Digg
  • Twitter
  • Facebook

Achieving Security Efficiency

Natasha July 27th, 2010 View Comments

Recently the Ponemom Insitute released its’ latest research on “Benchmarking Information Security Efficiency” Their goal was to help organizations determine the “most operationally efficient route to their desired security posture.” I’d hope that their desire would be continuous compliance. The research showed five key areas that affected security efficiency:

Appoint a CISO or organizational leader for information security:
Every project needs a champion. Your security and compliance program is no different. Security programs that garner support not just from IT but from departments across the enterprises improve their security outlook.

Initiate training and awareness programs on data protection and security for end-users:
Such great advice that many organizations take for granted. Policies and procedures cannot be followed and maintained if your staff does not know about them. Organizations must keep retraining as they hire new employees as well as to ensure security awareness is always at the forefront.

Achieve an organizational culture that respects privacy and data protection:

Cultural change does not happen overnight. Top level management must first define and document the organization’s desired security and compliance culture. They then need to implement programs and activities that communicate and reinforce this desired security compliance culture all departments across the enterprise.

Obtain executive-level support for security:
Agreed! Security compliance is not just the IT or Compliance department’s responsibility and transcends CIOs to the CEO and board of directors. The organization with top executive 100% engaged in its security compliance posture has an immediate advantage.

Deploy strong endpoint controls:
Choosing the right technology for your security programs is critical to achieving continuous compliance. Pick a solution that provides maximum security, automation, and flexibility.

  • Print
  • Digg
  • Twitter
  • Facebook