Mon, Oct 23, 2017
A A A
Welcome Guest
Free Trial RSS
Get FREE trial access to our award winning publications
Industry Updates

DTCC calls for increased public-private information sharing to protect capital markets from cyber attacks

Monday, June 04, 2012
Opalesque Industry Update: DTCC testified before a Congressional subcommittee that federal agencies and the financial sector must expand information sharing on cyber-threats to more effectively protect the capital markets from attack. DTCC also called for restarting the Government Information Sharing Framework (GISF), a successful but now-defunct pilot program that targeted cyber espionage as part of this information sharing effort.

Mark Clancy, DTCC Managing Director and Corporate Information Security Officer, told the House Capital Markets and Government Sponsored Enterprises Subcommittee during a June 1 hearing entitled “Cyber Threats to Capital Markets and Corporate Accounts” that the termination of the GISF program in 2011 eliminated a critical source of threat data and analysis for the financial sector.

“While financial institutions have robust information security programs in place to protect their systems from cyber threats, they are not foolproof,” Clancy said. “A critical resource the industry relies upon to help safeguard the system is information sharing between federal agencies and the financial sector. DTCC strongly supports restarting the GISF program, removing its pilot status and expanding its reach within the financial sector to ensure that all resources are working in concert to protect and defend the capital markets from cyber-attack.”

The GISF program commenced in 2010 as a collaboration between the Department of Defense (DoD), the Department of Homeland Security (DHS) and The Financial Services–Information Sharing and Analysis Center (FS-ISAC), the primary group for information sharing between the federal government and the financial sector. It allowed for the sharing of advanced threat and attack data between the federal government and 16 financial services firms that were deemed capable of protecting highly sensitive information. The program was expanded over time to include the sharing of classified technical and analytical data on threat identification and mitigation techniques.

The DoD in effect terminated the GISF program in December 2011, and information sharing through DHS, which was expected to continue, also ceased that month. Since the termination of GISF, several organizations in the financial sector have experienced threat activity from actors first identified to the industry through GISF reporting. A recent FS-ISAC assessment found that these threats will continue to increase in the years ahead.

Clancy credited the GISF program with enhancing the financial sector’s:

  • Access to actionable information to search for similar threat activity in their own networks,
  • Access to contextual information to better understand risk implications of various threats,
  • Ability to adjust assessments of cyber espionage using quantifiable information that had previously been unavailable, and
  • Understanding of the need to develop standards to support the automation of sharing and consuming threat data.

“Information sharing like that which occurred under the program represents the most critical line of defense in managing and mitigating cyber risk today,” Clancy said. “GISF drove innovative new initiatives in the industry and helped reshape the sector’s approach to assessing cyber espionage risks while prompting pilot firms, including DTCC, to revise best practices for managing threat information. It also spurred financial institutions to make significant additional investments in threat mitigation and detection capabilities that otherwise could not have been easily justified due the lack of understanding of the risk to the sector.”

Clancy added that while GISF was successful in many aspects, it should be expanded to include a broader group of financial institutions because the pilot program’s reach and impact were too limited and did not scale to the depth and breadth of the sector.

“Information sharing today occurs at human speed while cyber-threats occur at wire speed,” Clancy said. “Now more than ever, an investment in standards, protocols and methods for the industry to rapidly share and consume threat and observable data is needed.”

DTCC

Press Release

BM

What do you think?

   Use "anonymous" as my name    |   Alert me via email on new comments   |   
Today's Exclusives Today's Other Voices More Exclusives
Previous Opalesque Exclusives                                  
More Other Voices
Previous Other Voices                                               
Access Alternative Market Briefing

 



  • Top Forwarded
  • Top Tracked
  • Top Searched
  1. Regulatory - David Stockman: Trump tax reform overhaul is a pipe dream, stocks are heading for 40-70% plunge, Carried interest tax: How much does it matter?, Odey sees 'terrifying' mix in MiFID, tapering, asset values, Hedge funds come together to share cost of MiFID and research, SEC turns up the heat on U.S. investment advisers, India's Sebi asks hedge funds to report investments in commodity derivatives[more]

    David Stockman: Trump tax reform overhaul is a pipe dream, stocks are heading for 40-70% plunge From CNBC.com: David Stockman is warning about the Trump administration's tax overhaul plan, Federal Reserve policy, saying they could play into a severe stock market sell-off. Stockman, the R

  2. North America - Puerto Rico rejects loan offers, accusing hedge funds of trying to profit off hurricanes[more]

    From TheIintercept.com: Puerto Rico has rejected a bondholder group's offer to issue the territory additional debt as a response to the devastation of Hurricane Maria. Officials with Puerto Rico's Fiscal Agency and Financial Advisory Authority said the offer was "not viable" and would harm the islan

  3. Investing - WPP targeted by short-selling American hedge fund, Sun co-founder sells secretive hedge fund on big chip trade[more]

    WPP targeted by short-selling American hedge fund From Cityam.com: An American hedge fund has mounted a bet against WPP, the world's largest advertising group, with a trade worth almost £90m. Lone Pine Capital has built a short position worth 0.51 per cent of the FTSE 100 company,

  4. Hedge funds up as industry adjusts to rising rates[more]

    Komfie Manalo, Opalesque Asia: Hedge funds have reshuffled their portfolio after nearly four weeks of rising rates as the Lyxor Hedge Fund Index was up +0.2% from 19 September to 26 (+1.1% YTD), fuelled by strong results of global macro funds, Lyxor Ass

  5. Manager Profile - How the world's hedge fund king used 'idea meritocracy' to become a billionaire[more]

    From Forbes.com: In 1982, Ray Dalio made what he calls the biggest mistake of his life. He made a bet that there would be an economic collapse stemming from a debt crisis. And he was wrong. He lost money. He lost his client's money. He had to let people go from his firm and borrow money from his dad