80 likes | 314 Views
Emerging Retail Payments Risk Issues: AN INDUSTRY, REGULATORY & LAW ENFORCEMENT DIALOGUE November 5-6 * Atlanta, GA. Data Breaches in Payments Systems -- Roles and Best Practices for the Public and Private Sector Response. Jim Devlin Comptroller of the Currency November 5, 2009.
E N D
Emerging Retail Payments Risk Issues: AN INDUSTRY, REGULATORY & LAW ENFORCEMENT DIALOGUE November 5-6 * Atlanta, GA Data Breaches in Payments Systems -- Roles and Best Practices for the Public and Private Sector Response Jim Devlin Comptroller of the Currency November 5, 2009
Framework for the Private Sector – Public Sector Response FBIIC-FSSCC Cyber Security Committee Mission Statement Work with the financial services sector to strengthen cyber security and resiliency of the sector’s current and future IT operations 091105
Framework for the Private Sector – Public Sector Response FBIIC-FSSCC Cyber Security Committee Objectives • To strengthen the cyber security and resilience of the sector’s current and future operations. • To understand the current level of protection in the sector, and to develop recommendations for policy, education, best practices, and exercises to strengthen the sector’s resiliency to cyber threats. • To leverage resources of the Federal Government to improve the sector’s awareness of potential cyber threats and vulnerabilities. • To develop a single voice within the sector to interact with and respond to requests from the government and other sectors. 091105
Framework for the Private Sector – Public Sector Response FBIIC-FSSCC Joint Cyber Security Committee Exercise and Planning • Develop and execute Cyber Security Exercise • Update Supporting Protocols and Plans Information Sharing • Provide S-level Clearances for FS Critical People • Develop Roadmap for Improved Info Sharing International Issues • Develop framework for risk management issues • Develop telecomm prioritized resilience plan • What new threats / risks will arise? • What leap-ahead IT investments are needed? Long Range Vision 091105
What’s Been Done --- What’s on the Drawing Board FBIIC-FSSCC Joint Cyber Security Committee Exercise and Planning Information Sharing International Issues Long Range Vision December 2008 Security Clearances Mobile Devices R & D Agenda Supply Chain Threat Matrix Situational Analysis Undersea Cables How future Business decisions will drive changes in IT to support globalization September 2009 International Outreach Problem States Roadmap 091105
What’s Been Done --- What’s on the Drawing Board FBIIC-FSSCC Joint Cyber Security Committee Exercise and Planning Information Sharing International Issues Long Range Vision December 2008 Security Clearances Mobile Devices R & D Agenda Supply Chain Threat Matrix Situational Analysis Undersea Cables How future Business decisions will drive changes in IT to support globalization September 2009 International Outreach Problem States Roadmap 091105
What’s Been Done --- What’s on the Drawing Board FBIIC-FSSCC Joint Cyber Security Committee Exercise and Planning Information Sharing International Issues Long Range Vision December 2008 Security Clearances Mobile Devices R & D Agenda Supply Chain Threat Matrix Situational Analysis Undersea Cables How future Business decisions will drive changes in IT to support globalization September 2009 International Outreach Problem States Roadmap 091105
What’s Been Done --- What’s on the Drawing Board FBIIC-FSSCC Joint Cyber Security Committee Exercise and Planning Information Sharing International Issues Long Range Vision December 2008 Security Clearances Mobile Devices R & D Agenda Supply Chain Threat Matrix Situational Analysis Undersea Cables How future Business decisions will drive changes in IT to support globalization September 2009 International Outreach Problem States Roadmap 091105