Banking and Finance Sector-Specific Plan - U.S. Department of ...

More documents

Recommendations

Info

Due to its complexity, measurements of the resilience efforts in the Banking and Finance Sector are difficult to quantify using standard business measurements. Therefore, a one-size-fits-all approach would be inapplicable to all aspects of the sector and also would weaken creativity and vitality in the sector, which would harm the Nation’s economy overall. 7. CI/KR Protection Research & Development (R&D) In 2006, the FSSCC formed a R&D Committee to develop plans and programs that would provide the most benefit to the specific critical infrastructure and key resources (CI/KR) requirements of the financial services sector. The R&D Committee has identified eight areas that present significant issues to the ability of the Banking and Finance Sector to meet its challenges: (1) Secure Financial Transaction Protocol (SFTP); (2) Resilient Financial Transaction System (RFTS); (3) enrollment and identity credential management; (4) suggested practices and standards; (5) understanding and avoiding the insider threat; (6) financial information tracing and policy enforcement; (7) testing; and (8) standards for measuring return on investment of critical infrastructure protection and security technology. Accordingly, the R&D Committee views the following three themes to have the greatest impact to the financial services sector in terms of R&D projects: (1) protection and prevention systems; (2) advanced infrastructure architecture; and (3) human and social issues. 8. Managing and Coordinating SSA Responsibilities The Secretary of the Treasury designated the Assistant Secretary for Financial Institutions as the Treasury official with the responsibility for carrying out the Treasury’s duties as the SSA for the Banking and Finance Sector. The Assistant Secretary designated the Office of Critical Infrastructure Protection and Compliance Policy (OCIP) to provide the necessary functions on a daily basis. As such, the OCIP is the lead for all SSP activities and will continue to work with the FBIIC agencies and the FSSCC to coordinate any necessary updates and implementation efforts in conjunction with the triennial review of the National Infrastructure Protection Plan (NIPP) Base Plan. Additionally, the Treasury Department will work with the FBIIC agencies and the FSSCC to provide any necessary training on the SSP, as well as training and education on business continuity, information sharing, emergency response protocols, and cross-sector dependencies. Fortunately for the Banking and Finance Sector, a robust public-private sector partnership is already in place. The Treasury Department will continue to facilitate this partnership through our daily activities, outreach efforts, sponsoring of exercises, and through regularly scheduled meetings with the FBIIC and the FSSCC. The Treasury Department will continue to support and facilitate information-sharing efforts through the FBIIC, the FSSCC, the FS-ISAC, and regional coalitions. Banking and Finance Sector-Specific Plan
Introduction According to Homeland Security Presidential Directive 7 (HSPD-7), 1 signed by the President on December 17, 2003, the Department of the Treasury, as the Sector-Specific Agency (SSA) for the Banking and Finance Sector, is required to develop a Sector-Specific Plan (SSP) for critical infrastructure protection. This SSP provides the Banking and Finance Sector’s strategy for working collaboratively with public and private sector partners to identify, prioritize, and coordinate the protection of critical infrastructure. This SSP also summarizes the extensive activities the sector has already undertaken to reduce vulnerabilities and share information. The Banking and Finance SSP is part of the overall National Infrastructure Protection Plan (NIPP). As such, the Banking and Finance SSP conforms to the guidance provided by Department of Homeland Security so that the Banking and Finance SSP may be included in the NIPP. The NIPP provides the structure for integration of this SSP and the SSPs of the other 16 critical infrastructures and key resources identified in HSPD-7, thereby bringing together the efforts of these sectors into a single national program. 1 Homeland Security Presidential Directive 7 (HSPD-7), December 17, 2003, www.whitehouse.gov/news/releases/2003/12/20031217-5.html. Introduction
Page 1: Banking and Finance Critical Infras
Page 4 and 5: ii Banking and Finance Sector-Speci
Page 6 and 7: iv 2.2.5 Collecting Asset Data 25 2
Page 9 and 10: Executive Summary The Banking and F
Page 11: 3. Assess Risks Risk assessments ar
Page 16 and 17: and technological systems. These ex
Page 18 and 19: in various organized markets, from
Page 20 and 21: Figure 1-1: FBIIC Members FBIIC Mem
Page 22 and 23: • The NCUA regulates Federally ch
Page 24 and 25: • Identify voluntary efforts wher
Page 26 and 27: Continuity in the Financial Service
Page 28 and 29: The Banking and Finance Sector has
Page 30 and 31: system. All of the systemically cri
Page 32 and 33: linked to payments occurring in sys
Page 35 and 36: 3. Assess Risks Both the public and
Page 37 and 38: the FBIIC agencies identify financi
Page 39 and 40: 4. Prioritize Infrastructure In the
Page 41 and 42: 5. Develop and Implement Protective
Page 43 and 44: - The Treasury Department acquired
Page 45 and 46: work of the SSA and various public
Page 47: • In 2003, BITS and SIA drafted C
Page 50 and 51: 6.1.1 Developing Sector-Specific Me
Page 52 and 53: updates on the sector metrics in su
Page 54 and 55: 6 Implementation Action Milestone S
Page 56 and 57: • Understanding and Avoiding of t
Page 59 and 60: 8. Manage and Coordinate SSA Respon
Page 61: information. This information-shari
Page 64 and 65:
NFA National Futures Association NI
Page 66 and 67:
Federal Deposit Insurance Corporati
Page 68 and 69:
Office of Comptroller of the Curren
Page 70 and 71:
Department of the Treasury U.S. Cod
Page 72 and 73:
State Banking Law/Statute Maryland
Page 74 and 75:
National Association of Insurance C
Page 76 and 77:
Code & Regulations State URL §§ 5
Page 78 and 79:
Code & Regulations State URL §§ 3
Page 80 and 81:
State Statute Nebraska NE ST §§ 8
Page 82 and 83:
Date Title URL 08-05 Information Te
Page 84 and 85:
Date Title URL 08-01 Examination Pr
Page 86 and 87:
Federal Financial Institution Exami
Page 88 and 89:
Date Title URL 03-31 FFIEC Retail P
Page 90 and 91:
Date Title URL 12-05 Interagency Gu
Page 92 and 93:
National Credit Union Administratio
Page 94 and 95:
Date Title URL 09-01 NCUA Letter to
Page 96 and 97:
Date Title URL 05-04 Risk Managemen
Page 98 and 99:
Summary of Regulatory Guidance on E
Page 100 and 101:
Date Title URL 04-03 Interagency Gu
Page 103 and 104:
Appendix 3: FSSCC Research and Deve
Page 105 and 106:
1. Common operating picture archite
Page 107 and 108:
members are very active. One of the
Page 109 and 110:
K Financial information tracing is
Page 111:
SCC R&D Challenges vs. NIPP R&D The
show all

Banking and Finance Sector-Specific Plan - U.S. Department of ...

You also want an ePaper? Increase the reach of your titles

Delete template?

Save as template?