This is an online software solution. No software needs to be installed.
Yes, authorized users from your financial institution can be granted access to the system. Note that per user fees will apply for the optional Phone Factor enhanced level of log on security.
Yes, you may add as many questions as you like to the notes sections.
Beavercreek Marketing will update the risk assessment for new guidance and updated regulations, major new product releases and upgrades, and periodically to incorporate suggestions from our clients.
Authorized users will receive an email notice. Updates to your risk assessment will be clearly marked.
Products covered by the risk assessment include:
Personal online banking
Business online banking with ACH/Wire
Business mobile banking
Business deposit capture
Consumer deposit capture
Mobile deposit capture
Branch deposit capture
Online bill pay
Business online bill pay
Plus ACH operations risk assessment required by NACHA
No. Products cannot be removed from the risk assessment. Simply indicate “Not Applicable” for products not offered by your financial institution.
The ACH operations risk assessment does not apply to the FFIEC guidance for customer-facing online products. Instead, it applies to the NACHA requirements for using ACH in your internal banking operation.
Yes. A complete ACH operations risk assessment is included with your subscription. There are several unique categories specifically for the ACH risk assessment, including IAT.
100% of the original purchase price will be credited toward the purchase of the new ACH risk assessment tool. All clients that are currently subscribed to the ACH risk assessment will only pay the new annual recurring fee.
No. The new Electronic Banking Risk Assessment replaces the ACH Risk Assessment. Both are included in the new software.
Not at this time.
Yes, issues surrounding third party venders of online banking services are included in the Vendors Issues Section of the survey.
No. The user will review their answers to the survey and assign a risk rating based on the Likelihood of Risk, and also the Consequence of Risk. The survey questions and responses provide a useful guide for determining your own risk ratings.
Yes. An inherent risk assessment is essentially the initial risk before any controls have been added by the financial institution. The residual risk assessment is the risk after new controls are in place. Both inherent and residual risk assessments can be performed.
Three reports are available for each online banking product. The "Executive Summary" displays your inherent (if available) and residual risk ratings, plus the controls and management findings for each risk category. The "Full Report" prints all information including each survey question and response, along with risk ratings, controls, and management findings. The "All Products Summary" provides a high level overview of the inherent and residual risk ratings for all of the products.
Reports are not stored in the system. We recommend saving your reports as pdf files on your own computer or hard disk.
Yes, the history of risk ratings is stored in the system.
Yes. Date and names can be added to each risk rating. This information is stored in the system.
At least once a year, or more often as needed for new regulations, new products, new features, and substantial new known threats.
Yes. Just select that product from the menu.