Banking and Finance Sector-Specific Plan - U.S. Department of ...

8. Manage and Coordinate
SSA Responsibilities
8.1 Program Management Approach
The Secretary of the Treasury has designated the Assistant Secretary for Financial Institutions as the Treasury official with the
responsibility for carrying out the Treasury’s duties as the SSA for the Banking and Finance Sector. To perform these functions
on a daily basis, the Assistant Secretary has designated the Office of Critical Infrastructure Protection and Compliance Policy as
the lead office in fulfilling the requirements of creating the SSP for the Banking and Finance Sector. The Treasury Department
will review the effectiveness of the SSP program to accomplish the SSA responsibilities.
8.2 Process and Responsibilities
8.2.1 SSP Maintenance and Update
As the SSA, the Treasury Department will work with its public and private partners, the FBIIC and the FSSCC, to review and
update the SSP in coordination with the triennial review cycle of the update of the NIPP Base Plan. The Treasury Department
will be the lead coordinator of the review and update cycle. At least twice during each SSP creation cycle, the Treasury
Department will contact the FBIIC and the FSSCC to exchange facts and information that will enable the Treasury to determine
which parts, if any, of the SSP need to be updated or modified based upon changes that have occurred within the sector.
Information regarding these changes will be collected, analyzed, and managed by the Treasury Department and then, if the
Treasury deems it appropriate, incorporated into the updated SSP. The updated SSP will be circulated to all the FBIIC and the
FSSCC members for their individual review and comment. All changes that are made to the SSP will be forwarded to the designated
DHS program office assigned to receive such changes.
8.2.2 Annual Reporting
The Treasury Department exchanges facts and information with the members of the FBIIC and the FSSCC in developing and
updating the Banking and Finance Sector CI/KR Protection Annual Report. The Treasury Department provides the updated
Banking and Finance Sector CI/KR Protection Annual Report to the appropriate DHS program office.
8.2.3 Training and Education
Since the majority of the Banking and Finance Sector is owned and operated by the private sector, the Treasury, the FBIIC, the
FSSCC, and other sector participants continually work together to share responsibility for protecting the sector. A key component
of this responsibility is education and training public and private sector participants on business continuity, information
sharing, emergency response protocols, and the dependence on other sectors. As the owners and operators of the Banking and
Manage and Coordinate SSA Responsibilities