Wednesday, June 08, 2016 11.36AM / Office Of The Comptroller Of The Currency Bulletin
The Federal Financial Institutions Examination Council (FFIEC), on behalf of its members,1 today issued the attached statement, in light of recent cyber attacks, to remind financial institutions of the need to actively manage the risks associated with interbank messaging and wholesale payment networks.
Financial institutions should review their risk management practices and controls over information technology (IT) and wholesale payment systems networks, including authentication, authorization, fraud detection, and response management systems and processes.
The statement emphasizes that participants in interbank messaging and wholesale payment networks should conduct ongoing assessments of their ability to mitigate risks related to information security, business continuity, and third-party provider management.
Note for Community Banks
This guidance is applicable to all OCC-supervised institutions that use interbank messaging and wholesale payment networks either directly or through service providers.
In accordance with existing regulatory expectations and FFIEC guidance, national banks and federal savings associations should take appropriate risk mitigation steps, including