AppliedCS has the experience and expertise to reduce your in-house burden with policy and procedure writing and development.  Whether you need us to implement an entire Information Security Program, Risk Management Program, Compliance Management Program, Policy or Procedure, we can help.  Assisting with internal development projects has always been a sought-after service from AppliedCS. 

We have helped many institutions with a variety of solutions, including:

Understanding the difference between RPO, Recovery Point Objective, and RTO, Recovery Time Objective RPO, is defined by the length of time between your backup and the failure. This drives decisions on how often an institution creates a backup.  RTO defines how long an institution is willing to remain offline following a service disruption.  Balancing the two involves budget discussions as well as understanding Risk Tolerance.

Identification of appropriate mitigation and protective measures necessary during a pandemic, once considered high level or lower priority, is now front and center.  These disruptions can come from a pandemic or a natural disaster.  An operational plan to provide and implement selected mitigation, prevention, protection, or control measures, includes those necessary to allow essential functions to continue. Organizations must use their imagination when considering exposure and risk levels in situations where employees and clients may not know what’s next.

Our engagements include:

• Incident Response and Reporting Plans
• Vendor Management Programs
• Information Security Programs
• Risk Management Programs
• IT Risk Assessments
• Assessing the institution’s inherent IT Risks across the organization
• Providing regular reports to the board on IT Risks, IT Strategies, and IT Changes.
• Developing and implementing an IT Strategy to support the institution’s business strategy and risk appetite.

Policies used in subjective decision-making usually assist senior management with decisions that must be based on the relative merits of several factors. As a result, they often need help to test objectively.  The policy is a blueprint of the organizational activities which are repetitive/routine in nature.

• Request for Proposals
• Plan Testing Materials
• Security Awareness Materials

No matter what the content or context, our diverse resource pool will be able to deliver what you are looking for in a manner that will please your examiners.

The next time you have a development need and would like a quick, professional deliverable, please give us a call at (877) 897-0644.

• Truth In Lending Act (Reg. Z)
• Real Estate Settlement Procedures Act (RESPA)
• Fair Housing Act (FHA)
• Home Mortgage Disclosure Act (HMDA)
• Servicemembers Civil Relief Act (SCRA)
• Military Lending Act (MLA)
• Flood Disaster Protection Act (FDPA)
• Secure and Fair Enforcement for Mortgage Licensing Act (SAFE Act)
• Equal Credit Opportunity Act (ECOA)

• Expedited Funds Availability Act (Reg CC)
• Electronic Fund Transfer Act (Reg. E)
• Truth In Savings Act (Reg DD)
• Garnishment of Accounts Containing Federal Benefits

• Unfair, Deceptive, and Abusive Practices (UDAP)
• Fair Debt Collection Practices
• Third Party Risk

• Gramm-Leach Bliley Act (Privacy of Consumer Financial Information)
• Children’s Online Privacy Protection (COPPA)
• Right to Financial Privacy Act
• Telephone Consumer Protection Act
• Fair Credit Reporting Act (FCRA)

• Advertisement of Membership Part 328 of the FDIC
• Marketing & Advertisement Requirements
• Community Re-investment Act (CRA)
• BSA, AML, OFAC compliance
• Insider Lending (Reg. O)