Division of Consumer Services Information Security Resources

Resources to help licensees of DFI's Division of Consumer Services maintain information security and meet compliance requirements.

Overview

The Washington State Department of Financial Institutions Division of Consumer Services is concerned with the security of consumer information. Failure to maintain confidentiality, integrity, and availability of customer information can result in direct harm to consumers, as well as operational and reputational risk for licensees.

Licensees are encouraged to review relevant best practices and additional resources regarding information security and compliance listed below. These materials can provide valuable guidance on maintaining and enhancing Licensee information technology and security posture in accordance with industry standards and regulatory expectations.

Best Practices and Resource List

Voluntary best practices and resources to help financial institutions develop, document, and maintain an Information Security Program.

• Best Practices and Resource List

---

Nonbank Ransomware Self-Assessment Tool

Voluntary ransomware self-assessment tool to assess Licensees’ efforts to mitigate risks associated with ransomware and identify security gaps. Licensees are advised to safeguard completed assessments to prevent unauthorized disclosure.

• Nonbank Ransomware Self-Assessment Tool

---

Cyber Hygiene Awareness Campaign

Cyber hygiene programs generally include well-known controls that have been employed in financial institutions for years; however, ongoing attention is needed to ensure that these programs are consistently implemented and managed across the entire organization.

• Cyber Hygiene Awareness Campaign

Featured Topics

More than a Password | CISA

Free Cybersecurity Services & Tools | CISA

Tabletop Exercises | CISA