On January 13, 2017, the Federal Reserve, the OCC and the FDIC extended the comment period on an advance notice of proposed rulemaking on enhanced cyber risk management standards. The proposal, originally issued on October 26, 2016, addressed enhanced cyber risk management standards for large and interconnected entities under the supervision of the federal banking agencies. The proposal addressed five categories of cyber standards: cyber risk governance; cyber risk management; internal dependency management; external dependency management; and incident response, cyber resilience and situational awareness. In its notice announcing the extension of the comment period, the federal banking agencies noted that the range and complexity of the issues addressed in the proposal resulted in the extension of the public comment period. All comments on the proposal are due on February 17, 2017.
The text of the notice of the extension of the comment period is available at: https://www.federalreserve.gov/newsevents /press/bcreg/bcreg20170113a1.pdf.
The content of this article is intended to provide a general guide to the subject matter. Specialist advice should be sought about your specific circumstances.