The OCC released the Cybersecurity Supervision Work Program, which provides high-level examination objectives and procedures for cybersecurity assessment.
Details: The CSW program:
Aligns its objectives and procedures with existing supervisory guidance and the National Institute of Standards and Technology Cybersecurity Framework.
Does not establish new regulatory expectations, and banks are not required to use this work program to assess cybersecurity preparedness.
Does not change the availability of banks’ optional use of the FFIEC Cybersecurity Assessment Tool or other cybersecurity frameworks.