Featured Product

    FFIEC Encourages Standardized Approach for Cybersecurity Preparedness

    August 28, 2019

    FFIEC members emphasized the benefits of using a standardized approach to assess and improve cybersecurity preparedness. The members note that firms adopting a standardized approach are better able to track their progress over time and share information and best practices with other financial institutions and with regulators. FFIEC members welcome collaborative approaches to advance and support cyber preparedness and enhance the efficiency and effectiveness of the supervisory process.

    Institutions may choose from a variety of standardized tools aligned with industry standards and best practices to assess their cybersecurity preparedness. These tools include the following:

    • FFIEC Cybersecurity Assessment Tool
    • National Institute of Standards and Technology (NIST) Cybersecurity Framework
    • Financial Services Sector Coordinating Council (FSSCC) Cybersecurity Profile
    • Center for Internet Security Critical Security Controls

    While FFIEC does not endorse any particular tool, these standardized tools support institutions in their self-assessment activities. The tools are not examination programs and the FFIEC members take a risk-focused approach to examinations. As cyber risk evolves, examiners may address areas not covered by all tools.

     

    Related Links

    Keywords: Americas, US, Banking, Insurance, Securities, Cyber Risk, Standardized Approach, Cyber Preparedness, Cyber Security, FFIEC

    Related Articles
    News

    PRA Finalizes Approach to Supervision of International Banks

    In a recent Market Notice, the Bank of England (BoE) confirmed that green gilts will have equivalent eligibility to existing gilts in its market operations.

    July 26, 2021 WebPage Regulatory News
    News

    FCA Issues PS21/9 on Implementation of Investment Firms Regime

    The Financial Conduct Authority (FCA) published the policy statement PS21/9 on implementation of the Investment Firms Prudential Regime.

    July 26, 2021 WebPage Regulatory News
    News

    EBA Proposes Regulatory Standards to Identify Shadow Banking Entities

    The European Banking Authority (EBA) proposed regulatory technical standards that set out criteria for identifying shadow banking entities for the purpose of reporting large exposures.

    July 26, 2021 WebPage Regulatory News
    News

    IOSCO Proposes Recommendations on ESG Ratings and Data Providers

    The Board of the International Organization of Securities Commissions (IOSCO) proposed a set of recommendations on the environmental, social, and governance (ESG) ratings and data providers.

    July 26, 2021 WebPage Regulatory News
    News

    EC to Defer Application of SFDR Standards Till July 2022

    The European Commission (EC) announced plans to defer the application of 13 regulatory technical standards under the Sustainable Finance Disclosure Regulation (2019/2088) by six months, from January 01, 2022 to July 01, 2022.

    July 23, 2021 WebPage Regulatory News
    News

    BoE Consults on Approach to Setting MREL, Publishes Bail-In Guidance

    The Bank of England (BoE) published a consultation paper on approach to setting minimum requirement for own funds and eligible liabilities (MREL), an operational guide on executing bail-in, and a statement from the Deputy Governor Dave Ramsden.

    July 22, 2021 WebPage Regulatory News
    News

    EBA Seeks Views on Proportionality Assessment Methodology

    The European Banking Authority (EBA) is seeking preliminary input on standardization of the proportionality assessment methodology for credit institutions and investment firms.

    July 22, 2021 WebPage Regulatory News
    News

    US Agencies Propose Changes to Call Reports and Instructions

    Certain regulatory authorities in the US are extending period for completion of the review of certain residential mortgage provisions and for publication of notice disclosing the determination of this review until December 20, 2021.

    July 22, 2021 WebPage Regulatory News
    News

    PRA Finalizes Rulebook Definition of Higher Paid Material Risk-Taker

    The Prudential Regulation Authority (PRA) published the policy statement PS18/21, which introduces an amendment in the definition of "higher paid material risk taker" in the Remuneration Part of the PRA Rulebook.

    July 21, 2021 WebPage Regulatory News
    News

    EBA Examines Asset Encumbrance in Banking Sector

    The European Banking Authority (EBA) published its annual report on asset encumbrance in banking sector.

    July 21, 2021 WebPage Regulatory News
    RESULTS 1 - 10 OF 7291