Access Reviews
Which main customer/functional area do we not support through access reviews?
IAM
Clean Desk reviews occur this often:
Quarterly
True or False: The U.S. Congress signed a law in 2005 that required all Federal Reserve Bank's to adopt the COSO framework.
False. The FRS participates on the agreed-upon COSO framework in the spirit of accuracy and public trust.
Which one of these is not an applicable result of the AMP Monthly process:
1. Critical Finding
2. High Finding
3. Coaching Item
4. Low Finding
True or False: Avery has a master's degree
True. MBA obtained before starting at the Bank
True or False: The ACES tool rolled out new functionality which automatically does Standard Access Profile (SAP) comparisons for users
False. These comparisons are done by the ITC team for 13505!
True or False: The Clean Desk Review Policy is co-owned by Info Sec and Facilities Management
False.
COSO is rooted in:
a. Risk reporting
b. Audit reporting
c. Financial reporting
C. The purpose of the COSO internal control self-evaluation process is to be able to assert that the controls over the financial reporting and safeguarding of assets are adequate.
True or False: A Kriss-Kross review is when an entire team moves to a new district but access stays the same
True!
Favorite animated movie?
Mulan!
The ACES application is based out of which FRB?
Federal Reserve Bank of Cleveland
True or False: If a document is left out and has Internal FR-type information on it, but is not labeled Internal FR, it would not be counted as a finding.
True. Our reviewers are not in the business of classifying documentation.
One primary type of control is a detective control - defined as a mechanism intended to find problems with a process.
What is the other primary type of internal control?
Preventative: designed to prevent error, inaccuracy, or fraud.
This amp area is the most recent addition to the monthly review process
AMP Cloud
Favorite Bank Cafeteria item out of the following?:
1. Sandwich or Wrap
2. Philly Cheesesteak
3. Soup and Cornbread
4. Veggie complete Bowl
Veggie complete!
ACES stands for :
Access
Credentials
E_____
S_____
Access
Credentials
& Entitlements
System
Aside from KC, Denver, Omaha, and OKC - what other city is primarily implicated by our clean desk support
Minneapolis
COSO stands for:
Committee
Of
S_____
O_____
Of
Sponsoring
Organizations of the Treadway Commission
This is the amount of offboardings included in each monthly review (margin: +/-0)
12. Including one from each district
The Breed and Name of Avery's Dog:
Great Dane. Chibs.
There are this many steps in the ACES past due process:
6. Prior to due Date, Monday Following due date (+7, +14), 30 days past due, 45 days past due
From Q2 2019 to Q1 2020, we had this many violations (Margin of error: +/- 3)
39
The Federal Reserve System adopted the COSO framework in this year (margin: +/- a year)
1997
From July 2019-July 2020, how many coaching items were identified (+/- 2)
23!
Earned a president's award for work completed on what Bank initiative?
Data Privacy Program