Compliance, Security and Risk Analysis

Background

Information security is no longer optional. As colleges, universities and government entities, we face potential federal and state penalties as a result of a number of recent and not so recent legislation. The Gramm-Leach-Bliley Act (GLBA), Federal Trade Commission (FTC)’s Red Flags Rules, PCI - DSS, recently revised FERPA laws and the ever increasing number of state security breach statutes, to name just a few -- all mandate some form of security program with basic safeguards to protect critical data.

These laws are an organizational governance responsibility and fall on the shoulders of not only IT Directors and CIOs, but CFOs and executive management. In the case of the Red Flags Rules, responsibility even rests on the Board of Directors!

Overview of the “How – To” Compliance Toolkit for the Red Flags Rules

This “How – To” Toolkit is the first in a series of services to assist in navigating the complexities of information security compliance. This kit includes:

Seven documents to assist with Red Flags Rule compliance
A 90 minute webinar to explain the specifics of the legislation and review the tools provided
One hour of consulting time to answer institution specific questions and provide implementation support

Seven Documents to Assist with Red Flags Rule Compliance
Though further action is required to reach compliance, this “How – To” Toolkit provides the following templates to get started:

1. Explanation of Red Flags Rule Legislation (FTC 16 CFR Part 681)

Adobe Acrobat pdf document
Document provides a description of the Red Flags Rule in easy to understand English wording

2. Identity Theft Prevention Program Template

Microsoft Word document
Document provides an identity theft prevention program template that must be finalized with organization specific information

3. Guidelines on Identity Theft including Examples of Red Flags

Adobe Acrobat pdf document
Document provides a starter list of areas to be aware of that are likely indicators of identity theft patterns, practices or specific activities (red flags)

4. Red Flags Rule Questionnaire Template

Microsoft Word document·
Document provides a question set to assist schools in working with Document provides a question set to assist in working with key departments to identify potential areas where identity theft may occur.

5. Identity Theft Prevention Program Training Presentation Template

Microsoft Powerpoint presentation
Presentation template to be used as a training tool with all employees who will be implementing the Identity Theft Prevention Program. Must be finalized with organization specific information·

6. Red Flags Rule Board of Directors Briefing Template

Microsoft Word document
Factsheet template to brief senior management on the FTC’s Red Flags Rules and this Identity Theft Prevention Program. Must be finalized with organization specific information.

7. Project Tracking Template

Microsoft Excel spreadsheet·
Spreadsheet provides a proposed timeline to implement the use of these tools.

Webinar Details
A 90 minute webinar will be offered on various dates throughout the upcoming months. Available dates are on the Order Form and will be finalized once a contract and payment have been received by iSecure Solutions.

Consulting Time Details
Consulting time of one hour per institution is included in this service offering, to provide individual assistance after participating in the scheduled webinar. Sign up will be finalized once a contract and payment have been received by iSecure Solutions.

How to Purchase iSecure Solutions’ “How – To” Compliance Toolkit for –the Red Flags Rules:

Here’s how to order:
1. Print out: Order Form and iSecure Solutions Compliance Template License Agreement located below.
(please click here to download the Order Form)

(please click here to download iSecure Solutions Compliance Template License Agreement)

2. Complete the Order Form by filling in the blanks as indicated.

3. Complete the iSecure Solutions Compliance Template License Agreement by filling in the blanks, signing and dating the document.

4. Mail the Order Form, the iSecure Solutions License Agreement and a check made payable to “iSecure Solutions” to the following address:

                  iSecure Solutions
                  1611 Arran Way
                  Dresher, PA 19025

5. Once the contract and check are received, iSecure Solutions will contact you to schedule the webinar date, provide the seven compliance template documents and schedule the one hour session consult with your team.

Benefits of iSecure Solutions’ “How-To” Compliance Toolkit for the Red Flags Rule:

Provides an afford solution to begin to tackle security compliance at college and university campuses as well as government entities
Starts to create a culture of security awareness and compliance within your organization
Provides a foundation for continuous security improvement as each regulation is addressed