Network Security

Cybersecurity Compliance Update

FinTech innovations worry federal regulators while state officials create a new enforcement team. The US Office of the Comptroller of the Currency (OCC) is out with new guidance that warns banks about the risks and rewards of FinTech and related innovations. Meanwhile, New York financial regulators have launched a cybersecurity compliance division responsible for enforcing the state’s year-old cybersecurity regulations.

Federal Actions

Twice each year, the OCC reports on trends in the US financial sector that could be a “strategic risk” to the financial health and stability of banks. The most recent guidance includes a specific section on the risks associated with the rapid rise of FinTech and other innovations that complicate the way banks operate.

Not only does the OCC acknowledge tech-related security risks, but regulators also nod to the business risks of failing to adapt to changing market conditions that drive innovation such as customer expectations and the popularity of mobile banking: “Operational risk is elevated as banks adapt to a changing and increasingly complex operating environment.

Key drivers for operational risk include persistent cybersecurity threats as well as innovation in financial products and services, and increasing use of third parties to provide and support operations that are not effectively understood, implemented, and controlled. “In advising banking executives on what steps to take, the OCC notes: “Banks that do not assess business relevancy and impacts from technological advancement or innovation, or are slow adopters to industry changes, may be exposed to increasing strategic risk.”

State Actions

On the state level, New York’s Department of Financial Services (DFS) has created a Cybersecurity Division to enforce the State’s first-in-the-nation cybersecurity regulations adopted in 2017. The new unit will focus on protecting consumers and industries from cyber threats, a first for a state banking or insurance regulator.

“As technology changes the financial services industry, regulation must evolve, and DFS is evolving to meet the challenges and opportunities of the new landscape, to protect consumers, safeguard the industry, and encourage innovation,” noted DFS Acting Superintendent Linda Lacewell said.

New York’s action comes at a time when numerous states have strengthened their data privacy and security laws in the wake of continuing security breaches and ground-breaking privacy laws in Europe and California.

Ron Samson

Recent Posts

Endpoint Detection and Response (EDR) Comprehensive Overview

In a digital era where cyber threats lurk behind every click, Endpoint Detection and Response…

1 month ago

Managed Antivirus: Overview & Guide

In the modern digital age, where cybersecurity threats continue to evolve and become more sophisticated,…

54 years ago

What is a Virtual CISO and How Can it Help Your Cybersecurity?

In today's digital landscape, information security is paramount. However, many organizations struggle to allocate resources…

12 months ago

Endpoint Security Services: A Comprehensive Endpoint Security Solution

Every connected device that a business uses can act as a potential entry point for…

12 months ago

Why a Managed Security Operations Center is Essential for HIPAA Compliance

Healthcare organizations are responsible for handling sensitive patient information on a daily basis. With the…

54 years ago