1. FBIIC - FSSCC Cyber Security Committee Executive Committee Update April 5, 2012 Resiliency Management Committee Committee Mission & Objectives Enable a simple, consistent and structured crisis response process with codified roles and protocols for effective cross-agency information flow to support financial sector resiliency decisions and actions Coordinate holistic response to financial sector risk to any crisis-level effects Exercise processes and capabilities to sustain crisis readiness Functional Area Leaders: Brian Ridenour and Karl Schimmeck Status Project 1: Crisis Readiness and Execution Crisis Playbook updated with FS-CIRP annex and uploaded to FSSCC portal for Executive Committee and Crisis Management Team review / attestation Quantum After Action Report reviewed and posted for membership awareness Conduct Quarterly Critical Infrastructure Notification System tests Ongoing review and refinement of Crisis Playbook and FS-CIRP Project 2: Webinar Series for Awareness and Education PS-PREP for Banking & Finance Sector - - Tentatively scheduled for 2Q12 Crisis Readiness Webinar - - Tentatively scheduled for 3Q12 Global Emerging Risks - - 4Q12 Project 3: Sector Level Exercise Engagement National Level Exercise 2012 Resilient Constellation Exercise Series (2012 – 2013): Attended regional exercise planning kick-off meeting on April 2 in Atlanta 2012 FSSCC Fall Exercise: Coordinating a business continuity simulation event leveraging available sector tools, resources and technology Challenges/Issues to Elevate for Discussion Expand participation on the Resiliency Management Committee and Crisis Management Team to include Insurance Services’ major firms Project 1 Project 2 Project 3 Objectives and Milestone Commentary: Continue to “Operationalize” the existing tools (playbooks, CINS, etc) and protocols to establish baseline readiness of sector response teams Develop a coordinated 2012 Exercise strategy / plan and notification test program Collaborate within and across sector to define specific roles and expectations of response team members (e.g., DHS Liaison to the Crisis Management Team, Cross- Sector liaison, etc.) Facilitate timely remediation (resolve / mitigate to acceptable risk) of identified response gaps Define / validate requirements for “CMT roster representation,” proxy readiness, and new member orientation Maximize opportunity for and benefit to broader FSSCC member organizations in crisis management Formal Playbook Review and Attestation Design, plan and prepare for NLE- 12 participation Execute a FSSCC TTX to meet specific objectives Resolve all exercise lessons learned 27 31 Project Q4 '11 OctNovDec Q1 '12 JanFebMar Q2 '12 AprMayJun Q3 ‘12 JulAugSep Q4 ‘12 OctNovDec Q1 ‘13 JanFebMar Q2 '13 AprMayJun Q3 '13 JulAugSep Summary = Not Started= On Track= Slippage= Major Issues= Completed “#” Inside Milestone Marker Indicates the Day of the Month 31 18 1 Quantum Dawn AAR Reviewed and Updated Quantum Dawn AAR posted TBD 30 Execute NLE-12 TTX to meet specific objectives 30 Design, plan and prepare for Fall Exercise TBD 30 15 TBD 9 16