Cyber & IT Supervisory Forum - November 2023

Internal Use Only

Bankers Electronic Crimes Task Force (BECTF) Established in 2017 Community Bank CEOs Re-energized in 2020 Issuances: 1. CATO 2. Cyber Best Practices a. DDos b. Large Dollar Transfer c. Ransomware d. ATM Jackpotting 3. R-SAT

Purpose The Bankers Electronic Crimes Task Force (BECTF) will identify cyber threat trends, develop industry tools and resources, and prepare best practice documents to state banking regulators to assist in supporting sound IT supervision. This charter formalizes the group’s operation under the CSBS Bankers Advisory Board.

15

Internal Use Only

FFIEC Cybersecurity Assessment Tool (CAT) • Originally released in May 2017; has not been refreshed to reflect changes in control environment • CSBS workgroup being formed to address revisions based on industry and interagency feedback (September 2022) CSBS Ransomware Self-Assessment Tool (R-SAT) • Originally released in December 2020 • CSBS workgroup being formed to address revisions/refresh (September 2022) Board Reporting and Metrics Template • Developed a template containing various pertinent IT and cybersecurity metrics; designed to provide consistent, editable reporting to CISOs and Board members BECTF 2023/2024 Priorities:

16