US banks to report cybersecurity incidents within 36 hours


By MYBRANDBOOK


US banks to report cybersecurity incidents within 36 hours

US regulators have approved a new rule that requires banks to report any "significant" computer security incident within 36 hours of discovering it.

 

Under the rule, banks must inform their primary federal regulator about incidents that have — or are reasonably likely to materially affect — the viability of their operations, their ability to deliver products and services, or the stability of the U.S. financial sector.

 

Banks must also notify customers as soon as possible if the incident has, or is reasonably likely to, materially affect their users for four or more hours.

 

The Federal Deposit Insurance Corporation (FDIC) said that the rules “would apply to only those entities that are insured or regulated by the three banking agencies (FDIC, Federal Reserve or Office of the Comptroller of the Currency), or organizations that provide services to a regulated bank.

 

The final rule, approved by the FDIC, the Board of Governors of the Federal Reserve System (Board), and the Office of the Comptroller of the Currency (OCC), will take effect on April 1, 2022, with full compliance expected by May 1, 2022.

 E-Magazine 
 VIDEOS  Placeholder image

Copyright www.mybrandbook.co.in @1999-2024 - All rights reserved.
Reproduction in whole or in part in any form or medium without express written permission of Kalinga Digital Media Pvt. Ltd. is prohibited.
Other Initiatives : www.varindia.com | www.spoindia.org