Rule requires banks report significant ‘computer-security incidents’ within 36 hours
By 
Aaron Nicodemus2021-11-19T21:15:00
Federal banking regulators issued a rule that requires financial institutions to notify their regulator within 36 hours of a “computer-security incident” that materially affects their operation, ability to deliver services, or the stability of the financial sector.
THIS IS MEMBERS-ONLY CONTENT
You are not logged in and do not have access to members-only content.
If you are already a registered user or a member, SIGN IN now.
Related articles
-
ArticleFINRA notice outlines key areas for supervising third parties
The Financial Industry Regulatory Authority issued a notice on compliance deficiencies arising from firms’ relationships with vendors culled from examination findings.
-
ArticleTakeaways from NYDFS ransomware guidance
The New York State Department of Financial Services has issued guidance for regulated entities describing best practices for reducing the risk of a ransomware attack.
-
ArticleNYDFS regulation a best-practices model for cyber-security training
Companies must make cyber-security a continuous priority as threats evolve, often more quickly than the technology and regulations to counter them. That’s why the New York Department of Financial Services, under Maria Vullo, developed a policy that should act as a model for organizations.
More from Regulatory Policy
-
ArticleSEC gets earful about disclosure requirements from investors
Disclosure requirements for public companies have ballooned over the decades and need to be reigned in, the three members of the Securities and Exchange Commission (SEC), said Thursday.
-
ArticleNew DOJ policy places corporate enforcement emphasis on individual misconduct
The Department of Justice (DOJ) criminal division has announced a blanket policy against prosecuting companies that voluntarily disclose criminal wrongdoing and take other steps—and holding any individuals involved accountable for their criminal activities.
-
ArticleIf financial services firms don’t want more AI rules, comply with existing regs, experts warn
The U.K.’s financial regulators have long maintained that AI use by banks, insurers, and other financial services firms is already regulated under existing rules, but such assurances are increasingly being questioned.