Banking and Finance Sector-Specific Plan - U.S. Department of ...

2. Objective
The objective of this paper is to demonstrate how FSSCC research challenges relate to the NIPP R&D plans and programs, as
well as to demonstrate the aspects in which they differ. Because this paper combines the opinions of subject matter experts
in homeland security and financial services, the resulting recommendations will meet the needs of both constituencies. It is
intended that DHS should use this information to tweak its projects to directly address the CI/KR research needs of the financial
services industry. Consequently, the future direction and scope of the NIPP research program will align more closely with
the proposed FSSCC research challenge. For example, in the next version of the NIPP, DHS may add new R&D areas of focus
that are in the FSSCC document but are not in the current NIPP. In addition, they may be included in the financial services sector-specific
infrastructure protection plan.
The FSSCC understands that all sectors have been requested to share their R&D plan with DHS to facilitate similar gap analyses
across sectors. Were all sectors to perform gap analyses similar to that of this document, it would be easier for DHS to align
its overall R&D program with the needs of other sectors as well. The FSSCC is committed to participating in any activity that
renders a DHS R&D program that is consistent across sectors, between critical sectors, and the overall NIPP program.
3. Approach
The 2006 NIPP approach to conducting research and development and using technology is described section 6.3 of the NIPP.
It highlights three areas of planning and program activities that are intended to allocate protection resources where they can
best mitigate risk: (1) the NIPP R&D Plan, (2) the Federal Plan for Cyber Security R&D, and (3) R&D and planning efforts
conducted by the Sector-Specific Agencies (SSAs). This FSSCC research agenda identifies challenges that are the central focus of
R&D and planning efforts conducted by the financial services SSA, the Department of the Treasury. This document compares
the FSSCC research challenges to the overall NIPP R&D program.
Central to this comparison is a matrix (see appendix A) that shows the relationship between the FSSCC R&D research challenges
items and the NIPP R&D program. The matrix is intended to demonstrate that choosing a financial industry R&D
challenge item as a focus area for research in pursuit of NIPP R&D goals will provide research opportunities that are both welldefined
and fertile. The rows of the matrix identify the eight FSSCC R&D challenges. Most of the columns of the table show the
areas of research promulgated in the NIPP. The last four columns are R&D areas contemplated in the FSSCC program but not
included in the NIPP.
Columns labeled A-I are headed with NIPP themes (described in section 6.3.3.2 and appendix 6). Columns labeled J-M are
labeled with other NIPP R&D areas (described in section 6.5 and appendix 6). Columns labeled N-Q are labeled with financial
sector technology requirements for R&D (referred to in section 6.3.3.4) that are not R&D focus areas in the current NIPP.
Where there is a letter in the cell at the intersection of an FSSCC research challenge and an R&D area, it is meant to assert that a
focus on the FSSCC research challenge as a subject of research in the corresponding NIPP R&D area would provide immediate
benefit to the Banking and Finance Sector. Because the benefit would be a well-defined measure of success in the R&D effort,
such benefit would facilitate problem solving not only in the financial services industry, but also in any industry that requires
progress in that R&D area to solve its own problems. In each case, a brief statement of the reason for this assertion is included
in the “Research Guidance” section that follows the matrix. The guidance in that section identifies the focus area of intersection
between the FSSCC research challenge and the NIPP R&D area listed in the column heading. That is, the note labeled with the
letter in the cell corresponding to the R&D area for which the FSSCC research challenge should be a subject of the intersecting
NIPP R&D area focus is meant to convey the benefit of using the FSSCC research challenge as a focus area for that research area.
In addition, R&D focus on the eight FSSCC research challenges will help contribute to, and benefit from, the attainment of the
NIPP R&D long-term strategic goals, namely:
6 Banking and Finance Sector-Specific Plan