Federal Financial Regulators to Propose Enhanced Cyber Risk Management Standards

摘要

On Oct. 19, 2016, the Board of Governors of the Federal Reserve Systems, the Office of the Comptroller of the Currency (OCC), and the Federal Deposit Insurance Corporation (collectively, the Agencies) issued an advance notice of proposed rulemaking (ANPR) regarding enhanced cyber risk management standards for certain entities under their supervision (the Enhanced Standards).1 The ANPR contemplates that the Enhanced Standards would cover five topic areas: 1. Cyber risk governance; 2. Cyber risk management; 3. Internal dependency management; 4. External dependency management; and 5. Incident response, cyber resilience, and situational awareness.