Web Compliance Review - WCR

description

A Website Compliance Review assesses your informational website to ensure that your organization is in compliance with relevant laws, regulations, and best practices. We will review the entire site to verify that links are operational and are in accordance with accepted practices. Also included is a review of the organization's policies and procedures for management and providing continuity for the website services.

TESTING OBJECTIVES

Our Website Compliance Review follows the basic process outlined below:

1. Review written policy and procedure

2. Mirror website

3. Review layout, links, and information on website

4. Review compliance with all relevant laws and regulations

5. Review all relevant customer tools including response items, such as email and instant message, to ensure staff is monitoring the system correctly

6. Create a report with detailed remediation steps

7. Review report with internal staff 

We further test for the following aspects:

1. Links - E3 will verify all links and ensure they are appropriate.

2. Policy and Procedure - E3 will ensure the policy and procedure documents meet regulations and industry best practice.

3. Online feedback - E3 will review that emails and instant messages and other forms of communications are working as intended.

4. Laws and Regulations - E3 will ensure that the organization is in compliance with regulations from FFIEC, FDIC, and NCUA including the following:

   • Americans with Disabilities Act

   • Bank Secrecy Act (BSA)

   • Children’s On-line Privacy Protection Act (COPPA)

   • Equal Employment Opportunity Commission (EEOC)

   • E-Sign Act

   • Fair Credit Reporting

   • Fair Housing

   • FDIC Logo and FDIC Insurance

   • GLBA

   • HIPAA

   • NCUA Logo and NCUA Insurance

   • OFAC

   • Online Privacy Protection

   • Patriot Act

   • Privacy Act

   • Regulation B - Equal Credit Opportunity Act

   • Regulation BB (CRA) - Community Reinvestment Act

   • Regulation C (HDMA) - Home Mortgage Disclosure Act

   • Regulation CC - Expedited Funds Availability Act

   • Regulation DD (TISA) - Truth in Savings Act

   • Regulation E - Electronic Funds Transfer Act

   • Regulation FD - Public Disclosure

   • Regulation X - (RESPA) Real Estate Settlement Procedures Act

   • Regulation Z (TILA) - Truth in Lending Act

Site Compliance Review - ADA

description

The Department of Justice (DOJ) has specifically stated in rulings that websites should be designed so they are accessible to individuals who have vision, hearing, and physical disabilities. There’s a growing body of case law where the DOJ required companies to provide an Americans with Disabilities Act (ADA) compliant website and levied hefty penalties when sites failed to measure up.

While there are legal considerations that make having an ADA compliant website a solid business decision, it is also just a matter of good customer relations.

Social Media Review - SMR

description

Most organizations embrace social media for many reasons. However, companies often overlook implementing security policies involving of social media. Our SMR will assess if your company has implemented adequate policies and training for the use of social media as it pertains to staff, marketing, and personal references to the organization.