News

11:27 AM
Connect Directly
Facebook
Twitter
Google+
RSS
E-Mail

Legislation Still Needed On National Cyber Security Standard

While the President’s executive order on cyber security last week brought public attention to the growing issue of cyber threats, legislation is still needed from Congress to help block attacks like those aimed at banks in recent months.



Although bankers reacted positively to the Obama administration’s executive order last week concerning cyber security, legislation is still needed from Congress to develop a national cyber security standard, says Mercedes Tunstall, the head of the privacy and data security group at Ballard Spahr LLP, a national law firm. Such legislation failed to pass the last Congress, and a similar version of the bill was recently re-introduced to both the House and the Senate, Tunstall reports. “The executive order is a necessary step to help raise the national conversation on cyber security,” Tunstall explains. “But it doesn’t carry the force of legislation. It can only affect the way things operate under the existing laws and give a directional focus.”

[See Related: Cyber Attacks More Frequent and Harder to Detect]

The executive order called on government agencies and private institutions - including banks - to share more information pertaining to cyber security threats. But legislation can further help in this area by shielding banks from liability to encourage them to share information about cyber attacks and data breaches targeted at them, Tunstall says. Banks are understandably concerned that information that they share with the government can later be subpoenaed and open them up to litigation, she explains. “We need to help banks with sharing that information,” she says, adding that anti-money laundering legislation can provide a blueprint for how banks can share that information without liability. Congress has already amended the Bank Secrecy Act to allow banks to voluntarily share information about money laundering without opening themselves up to possible litigation. Similar legislation would allay any hesitancy on the par of the banks in sharing cyber threat information with the government, Tunstall suggests.

On the other hand improvements can also be made through legislation to help the government share information with banks too, she points out. “Sometimes the government will have information about an impending cyber attack that banks might find useful but they can’t share it because of national security concerns,” Tunstall explains. Any cyber security legislation should include protocols that help the government share information with relevant institutions if it is known that a cyber attack is coming against them.

The executive order may help in passing the new version of cyber security legislation that has been put in to Congress as it raises the profile of the issue, Tunstall reasons. As government agencies explore new ways to work with the existing laws under the executive order it should help lead to a more informed discussion in Congress this time around, she adds. Given the high number of cyber attacks against banks in the last few months, it is certainly in the best interests of the industry to see the legislation passed this time around.

Jonathan Camhi has been an associate editor with Bank Systems & Technology since 2012. He previously worked as a freelance journalist in New York City covering politics, health and immigration, and has a master's degree from the City University of New York's Graduate School ... View Full Bio

Comment  | 
Print  | 
More Insights
Comments
Newest First  |  Oldest First  |  Threaded View
Byurcan
50%
50%
Byurcan,
User Rank: Author
2/19/2013 | 5:17:34 PM
re: Legislation Still Needed On National Cyber Security Standard
Tunstall makes a good point, I believe banks would want any information-sharing initiative to protect that information from being used in litigation against them.

Bryan Yurcan
Register for Bank Systems & Technology Newsletters
White Papers
Current Issue
Bank Systems & Technology Oct. 14, 2014
Bank Systems & Technology's new Must Reads is a compendium of our best recent coverage of customer analytics. Learn what big data means for banks, meet Wells Fargo CDO Charles Thomas, find out how to connect with your Gen Y customers, and more.
Slideshows
Video
Bank Systems & Technology Radio
Archived Audio Interviews
Join Bank Systems & Technology Associate Editor Bryan Yurcan, and guests Karen Massey and Jerry Silva from IDC Financial Insights, for a conversation about the firm's 11th annual FinTech rankings.