General Information & Client Services
  • Americas: +1.212.553.1653
  • Asia: +852.3551.3077
  • China: +86.10.6319.6580
  • EMEA: +44.20.7772.5454
  • Japan: +81.3.5408.4100
Media Relations
  • New York: +1.212.553.0376
  • London: +44.20.7772.5456
  • Hong Kong: +852.3758.1350
  • Tokyo: +813.5408.4110
  • Sydney: +61.2.9270.8141
  • Mexico City: +001.888.779.5833
  • Buenos Aires: +0800.666.3506
  • São Paulo: +0800.891.2518
April 10, 2018

FFIEC members (FED, CFPB, FDIC, NCUA, OCC, and State Liaison Committee) issued a joint statement to describe the matters that financial institutions should consider when determining whether to use cyber insurance as a component of their risk management programs. The FFIEC members do not require financial institutions to maintain cyber insurance. The evolving cyber insurance market and the shifting cyber threat landscape may, however, prompt financial institutions to consider whether cyber insurance would be an effective part of their overall risk management programs.

The joint statement notes that cyber-attacks are increasing in volume and sophistication and that traditional general liability insurance policies may not provide effective coverage for all potential exposures caused by cyber events. Cyber insurance could offset financial losses from a variety of exposures—including data breaches resulting in the loss of confidential information—that may not be covered by more traditional insurance policies. Financial institution management should assess the scope of coverage of current insurance and consider how cyber insurance may fit into the overall risk management framework of an institution. As with any insurance coverage, cyber insurance does not diminish the importance of a sound control environment. Rather, cyber insurance may be a component of a broader risk management strategy, which includes identifying, measuring, mitigating, and monitoring cyber risk exposure.

 

Related Links

Keywords: Americas, US, Banking, PMI, Cyber Insurance, Risk Management, FFIEC

Related Insights
News

EBA Single Rulebook Q&A: First Update for November 2018

EBA published answers to seven questions under the Single Rulebook question and answer (Q&A) updates for this week.

November 09, 2018 WebPage Regulatory News
News

FED Finalizes the Large Financial Institution Rating System

FED finalized the new supervisory rating system for Large Financial Institutions (LFIs), to better align with the current supervisory programs and practices for these firms.

November 09, 2018 WebPage Regulatory News
News

ECB Publishes Guides for Capital and Liquidity Management by Banks

ECB published the guides for capital and liquidity management by banks in EU.

November 09, 2018 WebPage Regulatory News
News

EC Amends Regulation on Prudent Valuation for Supervisory Reporting

EC published the amended Implementing Regulation (EU) 2018/1627 on prudent valuation for supervisory reporting. Regulation 2018/1627 amends the Implementing Regulation 680/2014.

November 09, 2018 WebPage Regulatory News
News

FED Intends to Publish the Financial Stability Report in November 2018

FED intends to begin publishing a semiannual report presenting its view of the outlook for U.S. financial stability, on November 28. The financial stability report will include a summary of the FED framework for assessing the resilience of the financial system in the United States.

November 09, 2018 WebPage Regulatory News
News

ESMA Asks Clients of CRAs and TRs to Prepare for No-Deal Brexit

ESMA issued a public statement to raise awareness, among the market participants, on the readiness of credit rating agencies (CRAs) and trade repositories (TRs) for the possibility of no agreement being reached in the context of the United Kingdom withdrawing from the European Union (Brexit).

November 09, 2018 WebPage Regulatory News
News

EIOPA Publishes Result of the Work of EU-US Insurance Dialog Project

EIOPA published four papers resulting from the work of the EU–U.S. Insurance Dialog Project (EU-U.S. Project) in 2018.

November 08, 2018 WebPage Regulatory News
News

EIOPA Publishes Q&A on Regulations in November 2018

EIOPA published new sets of questions and answers (Q&A) on implementing and delegated regulations applicable to insurers in Europe.

November 07, 2018 WebPage Regulatory News
News

APRA Finalizes CPS 234 to Help Combat Threat of Cyber Attacks

APRA has released the final version of its prudential standard focused on information security management.

November 07, 2018 WebPage Regulatory News
News

EC Updates Rule on Forms and Templates for Resolution Plans by Banks

EC finalized the Implementing Regulation (EU) 2018/1624 that lays down implementing technical standards on procedures and standard forms and templates for the provision of information for the purposes of resolution plans for credit institutions and investment firms.

November 07, 2018 WebPage Regulatory News
RESULTS 1 - 10 OF 2192