The OCC today released its Cybersecurity Supervision Work Program for use by examiners. The program contains high-level examination objectives and procedures that are aligned with existing supervisory guidance and the National Institute of Standards and Technology’s cybersecurity framework, according to the agency. It does not establish new regulatory expectations and banks are not required to use the work program to assess cybersecurity preparedness.
Banking agencies pledge more scrutiny of core provider business practices
The federal banking agencies pledged to step up oversight of third-party core providers whose business practices “unreasonably limit” community banks from conducting due diligence or from negotiating contract terms that address the banks’ business needs.









