Banking and Finance Sector-Specific Plan - U.S. Department of ...

– The Treasury Department acquired $2 million in services from the FS-ISAC which had the added benefit of creating the
next generation FS-ISAC by increasing the protective functions of sharing and distributing information among the FS-ISAC
members, and improving the tracking and measurement of the FS-ISAC’s performance.
– The FS-ISAC has provided the following deliverables on behalf of the sector:
• Worked closely with the other ISACs in the development of a Framework for Operational Information/Intelligence
Sharing Between the ISACs. The purpose of this framework is to provide a useful operational guide for encouraging
broad participation in information sharing among and between all public-private critical infrastructure sectors;
• Implemented a crisis communications system to notify all of its members within less than 1 hour of an emergency. This
system has been modified to include a subgroup of all the FSSCC members;
• Developed a searchable database of past and current incidents, vulnerabilities, and threat data, along with an extensive
e-library of important security and infrastructure protection documents; and
• Developed threat vulnerability and incident management best practices.
• Regional partnerships share information pertinent on a local level to address specific local needs and establish relationships
on a local level with key decisionmakers. The number of these regional partnerships continues to expand and have provided
the following activities:
– Coordinate the Federal and State response to regional financial sector crises. One example includes partnering with
ChicagoFIRST and the Chicago Office of Emergency Management and Communications.
– Developed a handbook based on the ChicagoFIRST model to foster regional associations of financial services firms that
address CIP issues at the State, local, and tribal levels.
– Formed and continue to grow a council of regional partnerships, called RPC FIRST, to foster collaboration, share best
practices, and coordinate with the FSSCC and the FBIIC.
– Conduct exercises with local emergency management officials and State and Federal officials on areas of threat to the
region.
• Protective response planning exercises with the Treasury Department and several private sector financial institutions focus
on an explicit threat to a systemically critical financial institution. These exercises provide financial institutions and local law
enforcement with a protective response plan, through joint programs that include first responders;
• Information from various cyber protection alert services is shared and disseminated through established communication
protocols;
• Collaborative relationships with law enforcement and intelligence communities monitor new and emerging threats to mitigate
those threats and vulnerabilities;
• A research agenda addresses sector-specific goals. (See section 7 for details);
• A joint initiative with the National Infrastructure Advisory Council on the Pandemic Prioritization Initiative ensures that
critical financial services functions continue in the event of pandemic influenza; and
• Regular meetings of the Infectious Disease Forum. This Forum, which was established by the FSSCC and is led by the
Securities Industry and Financial Markets Association (SIFMA), provides a venue for the FSSCC members to collaborate
among themselves and with members of the FBIIC and with other sectors upon which the Banking and Finance Sector is
dependent.
Develop and Implement Protective Programs