TRAC™ is
efficient,
effective,
and easy!
 
1400 N Washington Ave
Suite 103
Madison, SD 57042-1147
605-270-3321
TRAC™ - Information Security Program Back
 

Select Policy and Sections

The TRAC™ Information Security Program (ISP) consists of eight high level policy sections. Each of these high level policy sections contain sub-sections that break down into manageable policy questions or statements.

Select Policy and Sections Click on image to enlarge
Selecting Policy/Sections
 

Answer Policy Questions

Each sub-section is made-up of policy questions. The questions are similar to the questions on an IT examination questionnaire received from a(n) regulator/examiner. Each institution needs to answer the questions to reflect the organizational security functions of the institution. The ISP contains only those policy questions that are checked “Yes”. There are also variables which can be changed to accurately reflect the security decisions each institution has made.

Answer Policy Questions Click on image to enlarge
Answering Policy Questions
 

Create Customized Policy Statements

The ISP is a dynamic format that allows the institution to have unique statements added to the ISP. The Addendum section allows unlimited unique statements to be added. The Addendum can be broken down into the same format as the rest of the ISP with policy sections and sub-sections. The Addendum is attached to the end of the ISP.

Create Customized Policy Statements Click on image to enlarge
Creating Customized Policy Statements
 

Produce the Information Security Program

TRAC™ produces a customized ISP based on the answers to the questions and the addendum statements made. The concept is very simple; if the policy question is answered “Yes”, there is a statement in the ISP to reflect that; if the question is answered “No”, there is not a statement. The TRAC™ ISP is generally seven to fifteen pages long and is the high-level guide to how information security will be handled at the institution.

Produce the Information Security Program Click on image to enlarge
Producing the Information Security Program