1. 1 Jim Devlin Comptroller of the Currency November 5, 2009 Data Breaches in Payments Systems -- Roles and Best Practices for the Public and Private Sector Response Emerging Retail Payments Risk Issues: AN INDUSTRY, REGULATORY & LAW ENFORCEMENT DIALOGUE November 5-6 * Atlanta, GA

2. 2 Framework for the Private Sector – Public Sector Response 091105 Mission Statement Work with the financial services sector to strengthen cyber security and resiliency of the sector’s current and future IT operations FBIIC-FSSCC Cyber Security Committee

3. 3 Framework for the Private Sector – Public Sector Response 091105 To strengthen the cyber security and resilience of the sector’s current and future operations. To understand the current level of protection in the sector, and to develop recommendations for policy, education, best practices, and exercises to strengthen the sector’s resiliency to cyber threats. To leverage resources of the Federal Government to improve the sector’s awareness of potential cyber threats and vulnerabilities. To develop a single voice within the sector to interact with and respond to requests from the government and other sectors. FBIIC-FSSCC Cyber Security Committee Objectives

4. 4 Framework for the Private Sector – Public Sector Response 091105 FBIIC-FSSCC Joint Cyber Security Committee Long Range Vision Exercise and Planning International Issues Information Sharing - Develop and execute Cyber Security Exercise - Update Supporting Protocols and Plans - Provide S-level Clearances for FS Critical People - Develop Roadmap for Improved Info Sharing - Develop framework for risk management issues - Develop telecomm prioritized resilience plan - What new threats / risks will arise? - What leap-ahead IT investments are needed?

5. 5 What’s Been Done --- What’s on the Drawing Board 091105 FBIIC-FSSCC Joint Cyber Security Committee Long Range Vision Exercise and Planning Information Sharing International Issues December 2008 September 2009 Situational Analysis Problem States Roadmap Security Clearances Mobile DevicesR & D Agenda Supply Chain Undersea Cables International Outreach Threat Matrix How future Business decisions will drive changes in IT to support globalization

6. 6 What’s Been Done --- What’s on the Drawing Board 091105 FBIIC-FSSCC Joint Cyber Security Committee Long Range Vision Exercise and Planning Information Sharing International Issues December 2008 September 2009 Situational Analysis Problem States Roadmap Security Clearances Mobile DevicesR & D Agenda Supply Chain Undersea Cables International Outreach Threat Matrix How future Business decisions will drive changes in IT to support globalization

7. 7 What’s Been Done --- What’s on the Drawing Board 091105 FBIIC-FSSCC Joint Cyber Security Committee Long Range Vision Exercise and Planning Information Sharing International Issues December 2008 September 2009 Situational Analysis Problem States Roadmap Security Clearances Mobile DevicesR & D Agenda Supply Chain Undersea Cables International Outreach Threat Matrix How future Business decisions will drive changes in IT to support globalization

8. 8 What’s Been Done --- What’s on the Drawing Board 091105 FBIIC-FSSCC Joint Cyber Security Committee Long Range Vision Exercise and Planning Information Sharing International Issues December 2008 September 2009 Situational Analysis Problem States Roadmap Security Clearances Mobile DevicesR & D Agenda Supply Chain Undersea Cables International Outreach Threat Matrix How future Business decisions will drive changes in IT to support globalization