The OCC released the Cybersecurity Supervision Work Program, which provides high-level examination objectives and procedures for cybersecurity assessment.

Details: The CSW program:

  • Aligns its objectives and procedures with existing supervisory guidance and the National Institute of Standards and Technology Cybersecurity Framework.

  • Does not establish new regulatory expectations, and banks are not required to use this work program to assess cybersecurity preparedness.

  • Does not change the availability of banks’ optional use of the FFIEC Cybersecurity Assessment Tool or other cybersecurity frameworks.