[Federal Register Volume 81, Number 59 (Monday, March 28, 2016)]
[Notices]
[Pages 17243-17244]
From the Federal Register Online via the Government Publishing Office [www.gpo.gov]
[FR Doc No: 2016-06949]


=======================================================================
-----------------------------------------------------------------------

DEPARTMENT OF THE TREASURY

Office of the Comptroller of the Currency


Federal Financial Institutions Examination Council Cybersecurity 
Assessment Tool Working Session in the National Institute of Standards 
and Technology Cybersecurity Framework Workshop

AGENCY: Office of the Comptroller of the Currency (``OCC''), Treasury.

ACTION: Notice of public meeting.

-----------------------------------------------------------------------

SUMMARY: The OCC, on behalf of itself, the Board of Governors of the 
Federal Reserve System, Federal Deposit Insurance Corporation, and 
National Credit Union Administration (Agencies), announces a public 
meeting to receive feedback on the Federal Financial Institutions 
Examination Council (FFIEC) Cybersecurity Assessment Tool (Assessment).

DATES: The Agencies will hold a public meeting on the Assessment on 
Thursday, April 7, 2016, beginning at 9:00 a.m. Eastern Daylight Time 
(EDT). The public meeting is a part of the National Institute of 
Standards and Technology (NIST) cybersecurity framework workshop, 
taking place on Wednesday, April 6, and Thursday, April 7, 2016. The 
public meeting on the Assessment will be a separate working session 
(Assessment working session) during the NIST workshop and will be open 
to any individual registered for the NIST workshop. Registrations for 
the NIST workshop will be accepted until March 31, 2016 11:59 p.m. EDT. 
There is no cost for registering for the workshop or attending the 
working session. Attendance at the Assessment working session will be 
on a first-come, first-served basis. The NIST workshop, including the 
Assessment working session, will be Webcast at http://www.nist.gov/itl/acd/cybersecurity-framework-workshop-2016.cfm.

ADDRESSES: The Assessment working session will be held on April 7, 2016 
at 9:00 a.m., at the NIST Campus, 100 Bureau Drive, Gaithersburg, 
Maryland 20899. All participants must pre-register at http://www.nist.gov/itl/acd/cybersecurity-framework-workshop-2016.cfm.

FOR FURTHER INFORMATION CONTACT: Beth Knickerbocker, Counsel (202) 649-
5490, for persons who are deaf or hard of hearing, TTY, (202) 649-5597, 
Legislative and Regulatory Activities Division, Office of the 
Comptroller of the Currency, 400 7th Street SW., Suite 3E-218, Mail 
Stop 9W-11, Washington, DC 20219.

SUPPLEMENTARY INFORMATION:  The FFIEC, on behalf of its members, 
released the Assessment on June 30, 2015, to help institutions identify 
their cyber risk and assess their cybersecurity preparedness. The 
purpose of the Assessment working session is to obtain substantive 
input from financial institutions and other interested parties on ways 
to improve the Assessment.
    The Agencies are holding the Assessment working session on April 7, 
2016, as a part of the NIST workshop, at the NIST Campus--100 Bureau 
Drive, Gaithersburg, Maryland 20899. The NIST workshop, including the 
Assessment working session, will be Webcast online at http://www.nist.gov/itl/acd/cybersecurity-framework-workshop-2016.cfm. The in-
person Assessment working session will be open to any individual 
registered for the NIST workshop and attendance will be on a first-
come, first-served basis. There is no cost for registering for the 
workshop or attending the working session. The Assessment working 
session will provide a forum for discussion of all aspects of the 
Assessment and will be an opportunity for interested persons to ask 
questions about the Assessment. Specifically, interested parties are 
encouraged to provide feedback on the Assessment's inherent risk 
profile, cybersecurity maturity, and supplemental materials. The 
Agencies may limit the time available to individuals seeking to provide 
their input, if needed, in order to accommodate the number of people 
desiring to speak.
    All participants in the Assessment working session must pre-
register for the NIST workshop at http://www.nist.gov/itl/acd/cybersecurity-framework-workshop-2016.cfm.
    Further details about the NIST workshop, including the Assessment 
working session, are published on the NIST Web site at http://www.nist.gov/itl/acd/cybersecurity-framework-workshop-2016.cfm. The 
agenda for the NIST workshop is posted at http://www.nist.gov/itl/acd/upload/Agenda_Cybersec-2.pdf.

[[Page 17244]]

Additional Background on Assessment

    Cyber threats have evolved and increased exponentially with greater 
sophistication. Cyber attacks on financial institutions may not only 
result in access to, and the compromise of, confidential information, 
but also the destruction of critical data and systems. Disruption, 
degradation, or unauthorized alteration of information and systems can 
affect an institution's operations and core processes and undermine 
confidence in the nation's financial services sector.
    The Agencies, under the auspices of the FFIEC, developed the 
Assessment to assist financial institutions of all sizes in assessing 
their inherent cyber risks and their cybersecurity preparedness. The 
Assessment is intended to allow a financial institution to identify its 
inherent cyber risk profile based on the financial institution's 
technologies and connection types, delivery channels, online/mobile 
products and technology services it offers, organizational 
characteristics, and current threats. Once an institution identifies 
its inherent cyber risk profile, it will then determine its 
cybersecurity maturity levels based on the institution's cyber risk 
management and oversight, threat intelligence and collaboration, 
cybersecurity controls, external dependency management, and cyber 
incident management and resilience. A financial institution can use the 
Assessment to identify opportunities for improving the institution's 
cybersecurity preparedness. Use of the Assessment by financial 
institutions is not mandatory. Additional information on the Assessment 
and supporting materials are available on the FFIEC's Web site at 
http://www.ffiec.gov/cyberassessmenttool.htm.

    Dated: March 23, 2016.
Thomas J. Curry,
Comptroller of the Currency.
[FR Doc. 2016-06949 Filed 3-25-16; 8:45 am]
 BILLING CODE 4810-01-P