|By Business Wire||
|March 10, 2014 12:21 PM EDT||
Promontory Financial Group today announced it has launched a new Web-based tool to assist companies in using a new cybersecurity framework released by the National Institute of Standards and Technology.
Earl Crane is a senior principal at Promontory Financial Group and the former director for federal cybersecurity policy on the White House National Security Staff. (Photo: Business Wire)
The NIST developed the “Framework for Improving Critical Infrastructure Cybersecurity” as directed in a February 2013 executive order that called for a voluntary, risk-based framework incorporating industry-leading practices and standards. Supervisors are likely to draw upon the framework when conducting examinations and updating their examination procedures. It is widely expected to become a critical component of any rigorous cybersecurity program in both financial and nonfinancial institutions.
"Many firms with high-performing cyberrisk management functions are already using elements of the framework internally,” said Earl Crane, a senior principal at Promontory. “However, they are now starting to use the framework to communicate their requirements and hold accountable their vendors, third-party service providers, and outsourced operations.”
The flexible, Web-based Cyberrisk Assessment Tool allows financial institutions to identify, manage, and report on cybersecurity risk, consistent with existing regulatory frameworks. The software, designed by industry experts and former compliance examiners, can be used to guide a company as it uses the NIST framework to improve its cyberrisk management programs and assess the cybersecurity of third parties.
“Regulators have recently noted the potential for third-party vendors to represent a weak link in an institution’s overall information-security system,” Crane said. “We believe this is the first tool to use the framework to manage vendor cyberrisk and reduce third-party risk exposure.”
“While the NIST cybersecurity framework is voluntary, it is emerging as one of the most important blueprints for cyberrisk management in regulated and nonregulated companies,” said Michael Dawson, a managing director at Promontory. “This tool helps companies use the framework in a robust, well-documented, and user-friendly way.”
Promontory Financial Group, headquartered in Washington, D.C., is the world’s foremost expert in financial risk, regulation, and compliance. The firm helps companies and governments around the world manage complex risk and meet their greatest regulatory challenges, thereby making its clients stronger and the financial system safer for consumers. Promontory has offices in New York, San Francisco, Atlanta, and Denver, and affiliate offices in Brussels, Dubai, Hong Kong, London, Milan, Paris, Singapore, Sydney, Tokyo, and Toronto. Eugene A. Ludwig, who served as U.S. comptroller of the currency under President Bill Clinton, founded Promontory in 2001.
May. 29, 2016 09:15 AM EDT Reads: 694
May. 29, 2016 08:15 AM EDT Reads: 2,725
May. 29, 2016 08:15 AM EDT Reads: 2,643
May. 29, 2016 07:00 AM EDT Reads: 2,285
May. 29, 2016 06:45 AM EDT Reads: 2,938
May. 29, 2016 06:30 AM EDT Reads: 627
May. 29, 2016 06:00 AM EDT Reads: 2,156
May. 29, 2016 06:00 AM EDT Reads: 1,338
May. 29, 2016 05:15 AM EDT Reads: 3,269
May. 29, 2016 05:00 AM EDT Reads: 1,968
May. 29, 2016 04:30 AM EDT Reads: 3,243
May. 29, 2016 03:30 AM EDT Reads: 977
May. 29, 2016 02:45 AM EDT Reads: 1,492
May. 29, 2016 02:30 AM EDT Reads: 1,349
Designing IoT applications is complex, but deploying them in a scalable fashion is even more complex. A scalable, API first IaaS cloud is a good start, but in order to understand the various components specific to deploying IoT applications, one needs to understand the architecture of these applications and figure out how to scale these components independently. In his session at @ThingsExpo, Nara Rajagopalan is CEO of Accelerite, will discuss the fundamental architecture of IoT applications, ...
May. 29, 2016 02:00 AM EDT Reads: 1,336