OCC Updates Cyber Audit Rules for Banks

The Office of the Comptroller of the Currency (OCC) said in a bulletin released Monday (Sept. 21) that it updated the structure and references of the OCC Cybersecurity Supervision Work Program (CSW) used by examiners, without adding or changing any procedures. The changes to the CSW include updating the structure to align with the updated National Institute of Standards and Technology (NIST) Cybersecurity Framework (CSF) categories and subcategories, addressing evolving risks and supporting risk