The Federal Financial Institutions Examination Council (FFIEC), on behalf of its members, today issued a frequently asked questions (FAQ) guide related to the Cybersecurity Assessment Tool (Assessment). The FAQ guide answers questions and clarifies points in the Assessment and supporting materials based on questions received by the FFIEC members over the course of the last year.
The FFIEC members developed the Assessment to help financial institutions’ management determine their risk profile and determine the institutions’ inherent risks and cybersecurity preparedness. The Assessment provides a repeatable and measurable process that financial institutions’ management may use to measure their cybersecurity preparedness over time. Use of the tool is voluntary, and financial institution management may choose to use the Assessment or another framework, or another risk assessment process to identify inherent risk and cybersecurity preparedness.
Management of financial institutions and management of third-party service providers are primarily responsible for assessing and mitigating their entities’ cybersecurity risk. Financial institutions can find the latest information about cybersecurity risk management at
www.ffiec.gov/cybersecurity.htm (opens new window)
As Prepared for DeliveryIntroductionGood afternoon and thank you for having me here at the New…
The United States reveals the identity of and imposes sanctions on Dmitry Khoroshev, a senior…
As Prepared for DeliveryGood morning. I am very glad to welcome all of you to…
WASHINGTON—Acting Comptroller of the Currency Michael J. Hsu today issued the following statement supporting an…
Washington, D.C.— The Federal Deposit Insurance Corporation (FDIC), the Office of the Comptroller of the…
As Prepared for DeliveryI. IntroductionThank you to everyone for being here. It’s good to be…