Presence of Legacy Onsite Exchange Server
Severity Level: Priority 1
Category: Infrastructure / Security
Description:
The bank relies on a legacy onsite Exchange Server, which is outdated and lacks modern security features, increasing vulnerability to exploits and misalignment with cloud-based standards.
Impact:
- Heightened risk of security breaches due to unpatched vulnerabilities.
- Non-compliance with modern IT standards, risking audit penalties.
- Limited scalability and integration with contemporary tools.
- Potential service disruptions from aging infrastructure.
FFIEC Reference:
- FFIEC IT Examination Handbook (November 2016):
- "Institutions should adopt modern, secure systems to replace outdated infrastructure." (p. 34)
- "Legacy systems increase operational and security risks." (p. 36)
Recommendations:
- Migrate to MS365: Transition to Microsoft 365 for enhanced security and scalability.
- Train Staff: Provide training on MS365 to ensure smooth adoption.