1 Flashcards
atm eft network rules subject to chargebacks?
Pin based are not subject to chargeback
Preventative detective and corrective are all ____controls
Timing
1 compliance officer
2 establishing a system of internal control
3 control independent audits
4 conduct independent testing
5 ongoing training
5 pillars of bsa
3 statuses for rtp transactions
Accepted, rejected and accepted not posted
Operations, reporting, and compliance
Coso objectives
Relies on interbank and intrabank funds transfer systems and networks to send payment instructions
wholesale payment systems
1 governance and culture
2 strategies and objectives
setting
3 performance
4 review and revision
5 information communication and reporting
Inerrated Framework ERM
created the consumer financial protection bureau CFPB and established UDAAP
Dodd Frank Act
Rule requiring financial institutions to establish and maintain written procedures that are reasonably designed to identify and verify the beneficial owners of a legal entities’ accountholders
CDD Rule
conducted to identify, measure and prioritize risks so attention is placed on the areas of greatest importance first
Risk Assessment
Ex post or real time
Basis FR uses to monitor and control the a FI Daylight OD
Control Environment
Risk assessment
Control Activities
Information and Communication Monitoring
Components of internal control
Guidelines developed by an organization to govern its actions and define the limits with which decisions must be made
Policy
Step by step instructions for CIP, CDD and CTR/SAR
BSA
Addresses the terms and conditions for accountholders using financial institutions website or online banking platform
E banking policy
guarantees an institutions system of internal controls operates effectively
Senior management/Board of Directors
the global open body formed to develop, enhance, and assist with the understanding of data security standard for payment account security
PCI payment card industry
governs private check clearing through the clearing house
Eccho
governs the collection checks and the terms and conditions under which reserve banks will receive and deliver funds over Fedwire
Reg J
the amount of funds a financial institution must hold as a percentage of their risk -weighted assets
Basel III Capital Adequacy
permitting access on a need to know basis
logical control
requires financial institutions to protect and identify non-public personal information and safeguard sensitive data
graham leach Bliley
Charters, regulations, and supervises all national banks and federal branches and agencies for foreign banks
OCC
will suffer the loss if a merchant is unable to pay a chargeback
aquirier
must be preformed before you can begin to mitigate any risks
risk assessment
physical and logical controls
type main types of controls
Online debit card transactions are
pin based
The cornerstone of BSA
SAR
process of safeguarding important information from unauthorized access, corruption or loss
data security
the two primary networks for interbank or large value domestic funds transfer payment orders
CHIPS and wires
warrants the makers signature is authorized on a remotely created check
BOFD
amount charged by one depository institution to another for an unsecured loan using their reserve balance
fed funds rate
stage of money laundering where cash deposits are structured to evade reporting requirements
placement
alternative way to transfer money without the movement of money
hawala
enacted after the 2007 2008 financial crisis intended to enforce transparency and accountability for consumer financial services
dodd frank
governs the rights and obligations of consumers and financial institutions for the usage of the electronic funds transfer
Reg E
Real time irrevocable credit transfer system
RTP and Fed Now
requires financial institutions to assist us governments to detect and prevent money laundering
BSA
created protection requiring financial institutions to have a policy to protect customer information from pretexting or phishing attacks
GLB ACT
regulation implementing the truth in lending act
Reg Z
Bureau of us treasury that receives and maintains financial transaction data, analyzes and disseminates the data for law enforcement purposes
Fin CEN
charters, regulate, and supervises national banks and federal savings associations
OCC
a set of state laws that governs check collection payment and liabilities
UCC4
a global information security standard designed to prevent fraud through increased control of cardholder data
PCI DSS
comprehensive guide assembled for the us department of treasury of FI that receive ACH federal government
green book
created the financial privacy and safeguard rules and regulations
GLBA
private organization governing exchange of electronic checks between its members
ECCHO
body of law intended to clarify the law governing commercial transactions and to make the laws consistent with the various jurisdictions
UCC4a
has the authority to protect consumers against abuses related to credit cards mortgages and other financial products
CFPB
act intended to speed up availability of deposited funds
expedited funds availability act
related credit card terms and conditions and places limits on certain fees and interest charged by credit card issuers
Card Act of 2009
forms of US government interagency body made up of the:
FRB
OCC
CFPB
FDIC
State Regulators
NCUA
FFIEC
Governs offering, accepting, and chargeback rights of certain cards
card rules
requires financial institutions to have a CIP program
patriot act
contains a subpart that says a substitute check is the legal equivalent of the original check
reg CC
largest private sector clearing system for domestic and international wires
CHIPS
body of law describing commercially reasonable security procedures
UCC4a
governing transactions that use an access device to initiate an electronic fund transfer to defined acccounts
Reg E
bipartisan federal agency with mission to protect consumers and promote competition
FTC
regulation designed to help consumers comparison shop for international wire foreign remittance by requiring disclosures about terms and cost
Reg E subpart B
entity enforcing review of all parties to IAT entry
OFAC
responsible for developing uniform principles, standards and report forms for federal examination done by agencies that participate in the formal interagency body
FFIEC
outlines responsibilities for financial institutions, third party sender and originators
nacha
international standards designed to improve regulation supervision and risk management within the banking sector
Basel III
Basel III principles
Leverage
Liquidity
Capital
alerts national banks and federal savings associations to risks associated with large dollar payment systems and systemic risk
occ235
state law governing transactions including some ach transactions
UCC
body of law containing provisions that can be altered by agreement
UCC4a
BUISINESS IMPACT ANALYSIS
RISK ASSESSMENT
RISK MANAGEMENT
RISK MONITORING AND TESTING
BCP STEPS
THE PROCESS OF PLANNING, ORGANIZING, LEADING, AND CONTROLLING THE ACTIVITEIS OF THE ORGANIZATION IN ORDER TO MINIMIZE THE EFFECTS OF RISK ON AN ORGANIZATION’S CAPITAL AND EARNINGS
ERM
TILA
EFTA
DURBIN AMENDMENT
REG Z
PCI DSS
BRAND RULES
NETWORK RULES
LEGAL FRAMEWORK FOR THE CARD NETWORK
DETERMINE CRITICALITY
ESTIMATE MAX DOWNTIME
EVALUATE RESOURCE REQUIREMENTS
BIA GOALS
comprehensive plan made to accomplish the organizational goals
strategic planning
frb
real time gross settlement system
payment is irrevocable and final
only originating fi can remove funds from its fr account
must contain an account with frb or a correspondent with access
fedwire funds service
preliminary step in the testing process
good as a training tool, but not preferred testing method
table top exercise
industry owned cooperative suppling standardized message services and interface software used for software
used for:
transmitting instructions to move funds
domestic and international payment instructions
swift
governs collecting checks and wire transfers through the frb
reg j
account opening and monitoring controls
duplicate detection software
procedures to meet return time frames
check risk controls
categorize information system
select security controls
implement security controls
assess security controls
authorize security controls
monitor security
security life cycle framework
establish policy
allocate personnel and resources
training
independent review
enterprise wide testing
review results
update
board and senior management
increase range of opportunities
reduce performance variability
improve resources deployment
enhance enterprise resilience
increase positive outcomes and reduces negative surprises
ERM Benefits
electronic money transfers from consumers in the us through remittance transfer providers to recipients abroad
international wire
review and revision
process to determine how well erm components are functioning over time
private sector bank used to settle foreign exchange payments simultaneously, designed to eliminate settlement risk,limited to certain currencies
continuous linked settlement bank