Does the VISTA meet the regulatory requirement for a vulnerability test?
Yes. In addition, VISTA is a security tool recommended by Internet security best practices. A banker told us that the VISTA reports and audit letter were especially helpful during the FDIC information systems examination, when the bank was asked which tools it uses to identify and control risk. “Verbal assurances are not enough. By showing the FDIC our VISTA reports and audit letter, we proved that we regularly identify risks, rank them by priority, adjust our actions to eliminate those risks, and then verify that we’re no longer vulnerable.
