Analysis: FFIEC's Update to Cyber Assessment Tool

Image Source: Article

Image Source: Article

A just released update to the Federal Financial Institutions Examination Council's Cybersecurity Assessment Tool will help make meeting regulators' demands for "baseline" cybersecurity more attainable, says Amy McHugh, a bank adviser and former IT examination analyst for the Federal Deposit Insurance Corp.

For example, before the changes, which only impact Appendix A of the tool, many smaller institutions were not able to meet the tool's requirement for having a data-flow diagram, she explains in an interview with Information Security Media Group.

Read the full article