OCC Updates Cyber Audit Rules for Banks
The Office of the Comptroller of the Currency (OCC) said in a bulletin released Monday (Sept. 21) that it updated the structure and references of the OCC Cybersecurity Supervision Work Program (CSW) used by examiners, without adding or changing any procedures. The changes to the CSW include updating the structure to align with the updated […] The post OCC Updates Cyber Audit Rules for Banks…
The Office of the Comptroller of the Currency (OCC) has revised the Cybersecurity Supervision Work Program (CSW) used by examiners for banks, without altering any procedures. These changes align the CSW structure with the updated National Institute of Standards and Technology (NIST) Cybersecurity Framework categories and subcategories.
The update aims to address evolving risks and support risk-based bank information technology examinations. The bulletin, which replaces the June 2023 bulletin "Cybersecurity: Cybersecurity Supervision Work Program," emphasizes cybersecurity preparedness and supplements the OCC’s bank information technology examination procedures.
The OCC does not expect banks to use this work program for assessing cybersecurity preparedness and encourages the adoption of standardized approaches to mitigate cybersecurity risks. The regulator has also noted that AI is transforming the cyber threat landscape and is urging banks to implement stringent security measures, leverage AI for threat defense, and understand the potential benefits and risks of advanced AI tools.
Written by urgent.news from PYMNTS's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.
