Does the internal VISTA meet the regulatory requirement for a vulnerability test?
Yes. In addition, internal VISTA is a security tool recommended by Internet security best practices. A banker told us that the VISTA reports and audit letter were especially helpful during the FDIC information systems examination, when the bank was asked which tools it uses to identify and control risk. “Verbal assurances are not enough.
