Division of Consumer Services Information Security Resources

Resources to help licensees of DFI's Division of Consumer Services maintain information security and meet compliance requirements.

Overview

The Washington State Department of Financial Institutions Division of Consumer Services is concerned with the security of consumer information. Failure to maintain confidentiality, integrity, and availability of customer information can result in direct harm to consumers, as well as operational and reputational risk for licensees.

Licensees are encouraged to review relevant best practices and additional resources regarding information security and compliance listed below. These materials can provide valuable guidance on maintaining and enhancing Licensee information technology and security posture in accordance with industry standards and regulatory expectations.

Best Practices and Resource List

Voluntary best practices and resources to help financial institutions develop, document, and maintain an Information Security Program.

• Best Practices and Resource List

---

Nonbank Ransomware Self-Assessment Tool

Voluntary ransomware self-assessment tool to assess Licensees’ efforts to mitigate risks associated with ransomware and identify security gaps. Licensees are advised to safeguard completed assessments to prevent unauthorized disclosure.

• Nonbank Ransomware Self-Assessment Tool

---

Fundamentals of Cyber Hygiene for Financial Institutions

For nonbank financial institutions, the modern threat environment presents an ever-expanding horizon of significant adversaries and attack methods – all aimed at crippling operations, extorting money from the institution, or stealing customers’ sensitive personal information. Having fundamental awareness of how to protect your institution from cyberattacks is important.

• Cyber Hygiene Awareness Campaign

Featured Topics

More than a Password | CISA

Free Cybersecurity Services & Tools | CISA

Tabletop Exercises | CISA