Newsroom

March 29, 2017

NAFCU, at Treasury, receives update on NIST framework, cyber issues

NAFCU representatives attended a meeting with the Financial Services Sector Coordinating Council Wednesday, which included discussions on cybersecurity, potential updates to the National Institute of Standards and Technology 2014 cybersecurity framework and the future of encryption.

NAFCU Regulatory Affairs Counsel Andrew Morris and Regulatory and Legislative Assistant Matt Schwartz attended the meeting. The association is a founding member of the FSSCC. The meeting, which took place at the Treasury Department, was jointly hosted with the Financial and Banking Information Infrastructure Committee. NAFCU has worked with both the FSSCC and FBIIC on cybersecurity issues.

The meeting included an overview of the current cybersecurity threat landscape faced by firms operating domestically or globally. The two also received an update on the efforts to clarify, refine and enhance the NIST framework. Comments are due April 10 on these revisions.

The future of encryption was also discussed by a representative from the Financial Services Information Sharing and Analysis Center (FS-ISAC), a group NAFCU works with on cybersecurity and information-sharing issues.

Brian Peretti, senior career official for the Office of Assistant Secretary for Financial Institutions at the Treasury Department also delivered remarks during yesterday's joint meeting. NAFCU met with Peretti in December on cybersecurity issues relating to the credit union industry.

NAFCU's recent collaboration with the FS-ISAC was noted in that meeting, along with the association's participation in the FSSCC's Cybersecurity Operational Capabilities Assessment task group.