Read the subsections of the risk mitigation security control of the Federal Financial Institution Examination Council (FFIEC) in the FFIEC IT Examination Handbook InfoBase.
https://ithandbook.ffiec.gov/it-booklets/information-security.aspx
Choose five of the controls from the left-hand panel of the website between Controls Implementation and Other Controls that are likely to be found in a small community financial institution. For each selection, discuss what it is and why you think it is applicable.