2017-01539: Enhanced Cyber Risk Management Standards
Public comment closed .
Get alerted when the next rule lands
New rules open for comment on their own schedule. Pick how you want to hear about them — we email you when one appears.
Publishing to members? Embed a live rule tracker on your own site — the proposed rules in your area and the comment deadlines closing on them, updating themselves. Free, one line of HTML.
Create a free account & build one →Summary
On October 26, 2016, the Board of Governors of the Federal Reserve System (Board), the Office of the Comptroller of the Currency (OCC), and the Federal Deposit Insurance Corporation (FDIC) (collectively, the agencies) published in the Federal Register an advance notice of proposed rulemaking (ANPR) regarding enhanced cyber risk management standards (enhanced standards) for large and interconnected entities under their supervision and those entities' service providers. The ANPR addresses five categories of cyber standards: Cyber risk governance; cyber risk management; internal dependency management; external dependency management; and incident response, cyber resilience, and situational awareness. Due to the range and complexity of the issues addressed in the ANPR, the public comment period has been extended until February 17, 2017. This action will allow interested persons additional time to analyze the proposal and prepare their comments.
The agency’s own summary, as published.
What this changes
Amends 2 parts of the Code of Federal Regulations — the standing rules this notice rewrites.
Rulemaking docket
We haven’t pulled this rulemaking’s full docket yet. View docket OCC-2016-0016 on Regulations.gov →
Don't miss the comment window
One Click Politics alerts you on every deadline, hearing, and rule change.
See all rules with comments due soon →