IT Audit

The regulations that govern information security at banks and credit unions are complex and intimidating. Small mistakes carry huge penalties, and even institutions that think they’re doing everything correctly can end up paying fines.

At Rivial, we maintain a thorough understanding of FFIEC, FDIC, OCC, NCUA, PCI DSS, ISO, and HIPPA regulations. We simplify the IT audit process and help you ensure your information security controls and policies are compliant and effective.

Custom-Tailored Process

Rivial understands that every institution is unique, and a one-size-fits-all approach to IT audits can’t be truly effective. We work to understand your needs and security posture first, then conduct a software-driven audit that’s customized to help you meet your goals and remain compliant.

Industry Experience

The people behind Rivial’s IT audits come from banking backgrounds. We’ve been on the other side of the handshake, so we know how frustrating it is to work with auditors who don’t speak your language. Our process was designed by financial professionals for financial professionals, so you can rest easy knowing we truly understand your needs and concerns.

Integrated Approach

Information security doesn’t exist in a vacuum. GRC, enterprise risk management, business continuity, and vendor management programs can all benefit from data collected during an IT audit. Rivial helps you fully integrate the audit process into your organization, dynamically generating reports for all stakeholders and working to provide you with a more useful understanding of your security.

Randy and his team were easy to work with since day one. During their onsite visit for our IT Audit, they showed professionalism in staff interviews and branch visits. Together we were able to augment our security program. Rivial ensured we were aware of compliance changes that were coming up and even held a conference call to go through them with the team.

CIO, $259M Credit Union

CFO, $600M Bank

We began using Rivial Security in 2015 and have been very pleased with their knowledge and professionalism. Their work is top notch and the Audit Committee appreciates the scope and depth of their work. In addition, Randy is a valued consultant. He helps us in planning and designing our IT security environment. We feel that our relationship with Rivial is much more than an audit relationship. We have a value-added relationship that strengthens our IT function.

CFO, $100M Bank

We have worked with Randy and his staff for three years specifically for our IT risk assessment. Rivial's methodologies and reporting has been well received by our 3rd party auditors and regulatory examiners. One of the best things about Rivial is that they take the time to understand the financial institution's needs and offer the right level of service. They are not interested in selling you unnecessary services. Randy and his staff are so easy with which to work and we are very happy with Rivial's performance. So much that we just signed a multi-year renewal for our IT risk assessment adding IT compliance audit and penetration testing.

CIO, $220M Credit Union

IT Audit

Custom-Tailored Process

Industry Experience

Integrated Approach

What People Are Saying

Audits Don’t Have to be a Hassle