The FDIC s Corporate Information Security Program is coordinated and implemented by the DIRM information security staff. The program encompasses all aspects of information security from virus protection and access control through the design and implementation of security controls for new technologies. During 1999, an Information Security Strategic Plan was developed and is being implemented. This Plan will support the increasingly critical activities related to information security for the FDIC and its information-sharing partners, including the financial regulatory community and the public. The Information Security Strategic Plan is based on the philosophy that management and user understanding of relevant security information is paramount.
Accountability is tied to the provision of knowledge.
Each entity that is provided with access to FDIC IT systems is responsible for the secure use of those systems and the information they contain. The FDIC and the entire financial industry are rapidly moving to take advantage of the Internet and other new information technologies. The use of new technologies creates a pressing need to ensure that vulnerabilities to critical systems and sensitive information are not created. In addition, the new technologies are also creating new possibilities for computer crime and cyber-terrorism. A primary focus of the FDIC s Security Program is the protection of our IT perimeters.