TIM-6705 v1

Organization for Economic Co-operation and Development. (2010). Policy framework for effective and efficient financial regulation. OECD.
This resource is important because it provides a setting where governments can compare policy experiences, seek answers to common problems, identify good practices, and work to coordinate domestic and international policies. Focus reading on pages 9-14.

National Institute of Standards and Technology. (2018, April 16). Framework for improving critical infrastructure cybersecurity, version 1.1. CSRC.
This resource presents a voluntary risk management framework (“the Framework”) that consists of standards, guidelines, and best practices to manage cybersecurity-related risk to promote protection and resilience of critical infrastructure and other sectors important to the economy and national security. Focus reading on pages 11-15.

Federal Financial Institutions Examination Council. (2014, November 3). FFIEC releases cybersecurity assessment observations, recommends participation in financial services information sharing and analysis. FFIEC.
This resource highlights cybersecurity assessment and recommendations to regulate financial institutions that participate in financial services Information sharing.

Federal Financial Institutions Examination Council. (n.d.). FFIEC cybersecurity assessment general observations. FFIEC.
This resource is important because FFIEC shared its observation on how well financial institutions are prepared to mitigate cyber risks. Focus reading on pages 1-4.

Benardo, M. B., & Weatherby, K. M. (2015). A framework for cybersecurity.
This resource gives an account of the evolving cyber threat landscape and the U.S. government’s response to enhance the security and resilience of the nation’s critical infrastructure sectors. It also depicts how components of financial institutions’ information security programs, including corporate governance, security awareness training, and patch-management programs, should be enhanced to address cybersecurity risks, and concludes with an overview of actions taken by the federal banking agencies to respond to cyber threats.

Clozel, L. (2016, October 12). Banks get (yet another) cybersecurity framework, this time from G-7. American Banker, 1(196).
This resource includes recommendations of eight elements of an effective cybersecurity program for private and public entities operating in the financial section, released by a group of seven countries.