Threat information sharing group for central banks, regulators and supervisors

By Digital News Asia June 13, 2018

The Monetary Authority of Singapore played a key role in conceptualising the Ceres Forum
A standalone secure portal and processes will ensure FS-ISAC member confidentiality

Threat information sharing group for central banks, regulators and supervisors

THE Financial Services Information Sharing and Analysis Centre (FS-ISAC) announced the launch of the Ceres (CEntral banks, REgulators and Supervisory entities) Forum effective July 1, 2018.

The Ceres Forum is a new information sharing group for central banks, regulators and supervisors to share information impacting global security and resiliency. It is the first such global platform bringing together these entities to guard against ever-growing cyber and physical threats and to meet their unique needs.

The Monetary Authority of Singapore (MAS), which collaborated with FS-ISAC to establish an Asia Pacific Regional Intelligence and Analysis Centre in 2017 to encourage sharing and analysis of cyber-security information between financial institutions in the region, also played a key role in conceptualising the Ceres Forum.

The impact of cyber-attacks including the 2017 WannaCry, data breaches and account takeover attacks leveraging on global payments systems against central banks and regulators demonstrate that security is a global concern.

The Ceres Forum will help these entities be more effective in defending against attacks that could impact the global financial services sector and the world’s economies.

“Cyber-threats have become increasingly frequent, complex and sophisticated,” said Bill Nelson, FS-ISAC president and chief executive officer. “The sharing of information and best practices among authorities in a timely way to address the rapidly evolving threats is critical.

“Today, there is no dedicated forum or system for regulators, central banks and supervisors to share information on cyber and physical threats. The Ceres Forum will bridge that gap with a platform that facilitates secure sharing of information about threats, vulnerabilities and incidences to stay ahead of crime.”

The new forum is separate from the FS-ISAC community of banks, credit unions, insurance companies, investment companies and other financial institutions, which provides a trusted space for private financial institutions to share information. A new standalone secure portal and processes will ensure FS-ISAC member confidentiality.

This Ceres Forum will:

Provide a trusted means for central banks, regulators and supervisors to share best practices related to regulatory and compliance controls.
Gather useful feedback about most effective controls.
Distribute rapidly information on cyber-threats, vulnerabilities, incidents and other threat intelligence that could impact financial services, including attacks that target central banks, regulators and supervisors themselves.

While employees working in operations from over three dozen central banks, regulators and supervisory entities are already members of FS-ISAC, this is the first time a community is being created to focus on the needs of supervisory and regulatory employees.