Banking and Finance Critical Infrastructure and Key Resources Sector-Specific Plan as input to the National Infrastructure Protection Plan May 2007 [...]... vulnerabilities and share information The Banking and Finance SSP is part of the overall National Infrastructure Protection Plan (NIPP) As such, the Banking and Finance SSP conforms to the guidance provided by Department of Homeland Security so that the Banking and Finance SSP may be included in the NIPP The NIPP provides the structure for integration of this SSP and the SSPs of the other 16 critical infrastructures... Department of the Treasury, as the Sector-Specific Agency (SSA) for the Banking and Finance Sector, is required to develop a Sector-Specific Plan (SSP) for critical infrastructure protection This SSP provides the Banking and Finance Sector’s strategy for working collaboratively with public and private sector partners to identify, prioritize, and coordinate the protection of critical infrastructure This SSP also... information sharing, www.whitehouse.gov/pcipb 6 Banking and Finance Sector-Specific Plan • Serve as the sector communications hub conveying timely and accurate cyber and physical threat information, and vulnerability and incident alerts to the membership; • Serve as the sector communications hub during emergencies, through the delivery of rapid notifications and communications to and among the FS-ISAC and the FSSCC members; • Identify and implement new services that add value to the membership and support the mission of the FS-ISAC; and. .. economic system Vision Statement for the Banking and Finance Sector To continue to improve the resilience and availability of financial services, the Banking and Finance Sector will work through its public-private partnership to address the evolving nature of threats and the risks posed by the sector’s dependency upon other critical sectors Sector Profile and Goals  The Banking and Finance Sector has three primary goals to achieve this vision statement... assessments are a long-standing practice within the Banking and Finance Sector and accepted by both the regulators and the private sector The Treasury Department and the FBIIC agencies meet continually with financial institutions to determine whether any new assets are critical to the operations of the sector and thus require special attention regarding potential vulnerabilities The Banking and Finance Sector... In turn, the financial institutions are better able to meet their customers’ demand for a high degree of resilience and reliability 16 www.federalreserve.gov/boarddocs/rptcongress/soundpractices/soundpractices200604.pdf 0 Banking and Finance Sector-Specific Plan 2 Identify Assets, Systems, Networks, and Functions Essential to conducting a risk assessment of the Banking and Finance Sector is the awareness that the products of the financial... programs and shares threat information through the FBIIC and the FSSCC as necessary 4 Prioritize Infrastructure The Treasury Department, in conjunction with the FBIIC agencies and the private sector, identifies and prioritizes key infrastructures and updates this list annually This prioritization is based on the impact to the orderly and efficient operation of the sector and public confidence if the infrastructure. .. ability of the Banking and Finance Sector to meet its challenges: (1) Secure Financial Transaction Protocol (SFTP); (2) Resilient Financial Transaction System (RFTS); (3) enrollment and identity credential management; (4) suggested practices and standards; (5) understanding and avoiding the insider threat; (6) financial information tracing and policy enforcement; (7) testing; and (8) standards for measuring... Provide an effective forum for information sharing within the financial services sector, with other critical infrastructure and key resources (CI/KR) organizations, and with the U.S Government; • Identify critical financial services sector operational support issues and requirements and articulate those to the Treasury and DHS; 13 As outlined in the National Strategy to Secure Cyberspace (February 2003), information sharing and analysis centers (ISACs) are the cornerstone of industry... Economic contribution: total market value of financial transactions conducted by or through the asset on a daily, weekly, monthly, and yearly basis; • International considerations, if any; • Existing and planned protective measures;  Banking and Finance Sector-Specific Plan • Membership in a regional partnership or ISAC; • Dependence on other sectors: Communications, Energy, Information Technology, and Transportation; • Interaction with other assets: those other critical national assets directly and indirectly affected by the operation of each asset; . Banking and Finance Critical Infrastructure and Key Resources Sector-Specific Plan as input to the National Infrastructure Protection Plan May 2007