VISTA? Internal Network Security Audits

VISTA-total includes both the internal-VISTA and external-VISTA testing. When your financial institution needs an independent internal and external penetration-vulnerability test of your network and Internet connection, the VISTA-total penetration study is the answer to your internal and external security needs. VISTA-total information request form

With the Gramm-Leach-Bliley and the regulator's information technology (IT) security concerns, it is imperative to take a professional auditor's approach to testing your internal connections to the network, which translates into the need to conduct a thorough penetration-vulnerability test of your internal and external computer operation.

For the internal VISTA, we send you the pre-programmed internal scanner box that you connect to your network like a workstation. Since R. Kinney Williams & Associates controls the programming and testing, we provide the independent testing required by the regulators. Click to enlarge the scanner box. The external VISTA is handled completely over the Internet, which gives a hacker's perspective of what information about your IT operation can be obtained.

Internal VISTA:
Frequently asked questions about internal penetration-vulnerability testing.
Sample Management report - Management Summary Report
Sample penetration-vulnerability test results used by your IT professionals - Technical Test Results Report

External VISTA:
What is an external penetration-vulnerability test? - Frequently Asked Questions
Sample Management report - Management Summary Report
Sample penetration-vulnerability test results used by your IT professionals - Technical Test Results Report

The VISTA-total penetration-vulnerability test meets the independent security testing requirements of the FDIC, OCC, OTS, FRB, and NCUA as outlined in the Information Security booklet. The requirement states in part "High-risk systems should be subject to an independent diagnostic test at least once a year." If your institution is hosting your web site and email operation, your IT operation would be considered "high-risk."

The Gramm-Leach-Bliley Act, information technology best practices, bonding companies, and examiners are requiring an independent third-party Internal security tests for banks, savings & loans, and credit unions.

We are IS auditors that only work for federally insured deposit institutions, and therefore, we understand the special regulatory requirements and security issues placed on your institution. As auditors, we perform the penetration test of your Internal connection.

The VISTA-total Internal Security Audit Penetration Test provides your institution the independent test of your IT security required by the regulators. The test is performed by R. Kinney Williams, CFE, CISM who is an IT auditor with over 30 years experience auditing IT departments for financial institutions.

We have clients in 40 states and have more than 21 years experience as a former examiner. R. Kinney Williams is accredited by the Information Systems Audit and Control Association (ISACA) as a Certified Information Security Manager (CISM) as well as a Certified Financial Examiner (CFE) by the Society of Financial Examiners (SOFE.)

The VISTA-total internal penetration-vulnerability test focuses on your network from a hacker's perspective to identify vulnerabilities that will allow a hacker to infiltrate and possibly control your computer operation.

Unlike most of the IT security testing companies, we do not sell hardware or software. We are professional IT auditors. We are not in competition with your contracted IT professionals. Many outsourced IT professionals refer our services to their clients because we are an independent IT auditing company that can provide the required independence necessary for penetration-vulnerability testing.

See our ad in the Independent Banker, a publication of the Independent Community Bankers of America.

Please complete the VISTA-total information request form to receive due diligence information about our company, VISTA agreement, and fees. All communication is kept strictly confidential.

Why should we use the VISTA-total security testing services instead of another company?