Hot Topics in the IT Examination

Date:

Jul 18, 2025

Register

Have you done enough since your last IT examination to pass this exam? The Gramm-Leach-Bliley Act of 1999 required banks to implement an Information Security Program, and the examiners visit your institution to ensure it is done and keeping up with the evolving security and technology landscape. Attend this session to understand the hot topics that examiners are looking for in technology and security.

Agenda

Friday, July 18th, 2025
11:00 am - 12:30 pm EST

A wide range of hot topics will be covered, including cyber training advancements, data privacy, management testing, continuous auditing, BIA, third-party management, and artificial intelligence concerns. A “Hot Topics 2025 Checklist” is provided to each attendee to take back to the institution and begin improving readiness for the next IT exam.

Topics
  • Overview of the IT examination and the Information Security Program requirement
  • Review of the FFIEC IT Booklets, Work Programs, and Regulation
  • Review a framework for an Information Security Program
  • Review advancements in cyber awareness, training, and education
  • Review advancements and expectations in data privacy
  • Review changes in cyber management testing programs
  • Describe an approach moving toward continuous auditing
  • Review of changes to business impact assessment (BIA)
  • Describe the heightening concern of vendor risk
  • Overview of AI considerations for your Information Security Program
Speaker(s)

Dr. Kevin Streff is Founder of several cyber startups and acquisitions, including American Security and Privacy, LLC, Secure Banking Solutions, LLC, SBS Cyber, LLC, and Blu3 Technologies, LLC. His businesses have worked across all fifty states and internationally helping organizations comply with legal and regulatory data protection mandates, as well as planning and implementing sound information security and privacy strategies. For over 20 years, Dr. Streff was Professor & Research Lab Director at Dakota State University, a National Center of Excellence in Cyber Defense through the National Security Agency, and The Department of Homeland Security. Dr. Streff recently left the university to become Founder and Managing Partner at American Security and Privacy, the first company focused primarily on both security and data privacy in the banking sector. He speaks nationally and internationally on data security and privacy, and has been featured in Money Magazine, CNN Online, The Wall Street Journal, and NBC News. His research is published in top academic journals and promoted at prestigious academic conferences. Dr. Streff has testified to Congress in field hearings as well as in Washington, DC to promote sound national policy on these critical issues.

Additional Information

Who Should Attend?

This session is ideal for information security officers, C-suite personnel, IT risk officers, information privacy officers, incident handlers, lead auditors, vendor managers, emergency management professionals, compliance officers, and IT directors.

Fees

$299.00 or 1 Token

Available Upgrades

  • 12 Months OnDemand Playback $120.00
  • 12 Months OnDemand Playback + Digital Download $150.00
  • Additional Live Access $95.00 per person
Association Contact

Elizabeth DeHaven
Education Manager
o: 317-387-9380 
d: 317-333-7169
edehaven@indiana.bank