Information Sharing
Facilitating the sharing of timely, actionable information regarding emergencies with member organizations and across the financial sector is a primary function of FBIIC.
Table of Contents
Coordination and Infrastructure
Natural Disasters and Health Emergencies
Cybersecurity and Emergency Preparedness
Business Continuity
- FEMA - Continuity Guidance Circular-1
- FEMA - Effective Coordination of Recovery Resources for State, Tribal, Territorial and Local Incidents – March 2, 2015
- Key response planning factors for the aftermath of Nuclear terrorism
- "THE AFTERMATH OF NATURAL DISASTERS: BEYOND DESTRUCTION" - Eduardo Cavallo and Ilan Noy
- Approved and Released: Continuity Guidance Circular 2 (CGC 2), Effective July 22, 2010
- Vital Records brochure
Cybersecurity
- Internet Society – Global Internet Report 2016 - November 22, 2016
- Treasury – G7 Fundamental Elements of Cybersecurity for the Financial Sector - October 11, 2016
- DHS – Cyber Incident Reporting: A Unified Message for Reporting to the Federal Government - August 1, 2016
- How to Protect Your Networks from Ransomware - DOJ - July 28, 2016
- FS-ISAC - Security of Payment Network Access Points - July 5, 2016
- Joint Statement – Cybersecurity of Interbank Messaging and Wholesale Payment Networks - June 6, 2016
- Fact Sheet - Joint Council Webinar Series - May 27, 2016
- FBI – Ransomware Flyer - April 29, 2016
- DOJ – Ransomware_eVersion - April 14, 2016
- US-Cert – Cybersecurity Workforce Development Toolkit; How to Build a Strong Cybersecurity Workforce - April 1, 2016
- US-Cert – Ransomware and Recent Variants - April 1, 2016
- DOE – Cyber Strategy – January 4, 2016
- IIROC - Cybersecurity Best Practices Guide – January 4, 2016
- IIROC - Cyber Incident Management Planning Guide – January 4, 2016
- SIFMA – Quantum Dawm 3 After Action Report – November 24, 2015
- DHS – Alert TA15-120A – Securing End-to-End Communications – April 30, 2015
- DHS – Alert TA15-120A – Securing End-to-End Communications – April 30, 2015
- DOJ-Best Practices For Victim Response and Reporting of Cyber Incidents – April 30, 2015
- DHS – Alert TA15-119A – Top 30 Targeted High Risk Vulnerabilities
- FBI - Hacktivists Threaten to Target Law Enforcement Personnel and Public Officials – April 22, 2015
- International Chamber of Commerce – Cybersecurity Guide for Business – April 16, 2015
- DHS – Alert TA-105A – Simda Botnet – April 16, 2015
- DHS – Alert TA15-103A – DNS Zone Transfer AXFR Requests May Leak Domain Information – April 14, 2015
- FBI - Criminals Host Fake Government Services Web Sites to Acquire Personally Identifiable Information and to Collect Fraudulent Fees– April 8, 2015
- FBI - ISIL Defacements Exploiting WordPress Vulnerabilities – April 8, 2015
- IRS - Tax Preparers to Watch out for New Phishing Scam; Don’t Click on Strange Emails or Links Seeking Updated Information – February 19, 2015
- IRS and US-CERT Caution Users: Prepare for Heightened Phishing Risk This Tax Season – February 19, 2015
- NSA – Defensive Best Practices For Destructive Malware – January 26, 2015
- DOE – Energy Sector Cybersecurity Framework Implementation Guide – January 8, 2015
- ICS-CERT – ICSA-14-353-01A – Network Time Protocol Vulnerabilities – December 24, 2014
- US-CERT – Alert TA14-353A – Targeted Destructive Malware – December 19, 2014
- Treasury – Deputy Secretary Remarks at the Texas Bankers’ Association Executive Leadership Cybersecurity Conference – December 5, 2014
- USSS, FS-ISAC, and R-CISC – Protecting Merchant Point of Sale Systems During the Holiday Season – November 7, 2014
- FFIEC – Press Release – Cybersecurity Assessment Observations and Recommends FS-ISAC Participation – November 4, 2014
- FFIEC – Cybersecurity Assessment General Observations – November 4, 2014
- FFIEC – Cybersecurity Threat and Vulnerability Monitoring and Sharing Statement
- DHS – TA14-295A –Crypto Ransomware – October 23, 2014
- FCC – Communications Security, Reliability, and Interoperability Council – October 15, 2014
- Presidential Proclamation -- National Cybersecurity Awareness Month – September 30, 2014
- FFIEC - Financial Institutions Should Move Quickly to Address Shellshock Vulnerability – September 29, 2014
- OCC Bulletin 2014-48 - Bourne-Again Shell (Bash) "Shellshock" Vulnerability – September 29, 2014
- US-CERT Alert (TA14-268A) - GNU Bourne Again Shell (Bash) ‘Shellshock’ Vulnerability – September 25, 2014
- US-CERT: Backoff: Point of Sale Malware – Revised – August 18, 2014
- Backoff: New Point of Sale Malware – July 31, 2014
- SIFMA – Small Firms Cybersecurity Guidance – July 28, 2014
- FDIC – Cyber Challenge: A Community Bank Cyber Exercise – July 1, 2014
- FFIEC Cybersecurity Awareness - June 26, 2014
- Staying Ahead in the Cybersecurity Game – June 12, 2014
- Symantec – Latin America and Caribbean Cybersecurity Trends – June 5, 2014
- OCIA Sector Risk Snapshots: May 2014
- Big Data: Seizing Opportunities, Preserving Values
- Beyond Data Breaches: Global Interconnections of Cyber Risk
- Critical Cybersecurity Threats & How to Prepare in 2014: industry advice and best practices for hedge funds and investment firms
- Department of Justice and Federal Trade Commission: Antitrust Policy Statement on Sharing of Cybersecurity Information
- “Heartbleed” OpenSSL Vulnerability
- Distributed Denial-of-Service (DDoS) Cyber-Attacks, Risk Mitigation, and Additional Resources
- Cyber-attacks on Financial Institutions’ ATM and Card Authorization Systems
- Operation Windigo – Linux Server Side Credential Stealing Malware Campaign
- OAS CYBER SECURITY JOURNAL: Views and Advances on Cyber Security
- The Current State of Cybercrime 2013
- The Cyber Espionage Blueprint: Understanding Commonalities In Targeted Malware Campaigns
- Reinventing Threat Intelligence
- Data Protection and Breach Readiness Guide
- 2013,Cost of Cyber Crime Study: United States
- Cybercrime Exposed - Cybercrime-as-a-Service
- Handling Destructive Malware
- DDoS Quick Guide
- Information Assurance Directorate
- Cyber Security Incident Response
- Tools and Standards for Cyber Threat Intelligence Projects
- Planning and Recommended Guidance - Destructive Malware
- Cyber threat intelligence and the lessons from law enforcement
- Consumer Mobile Trends Report
- Cloud APIs – the Next Battleground for Denial-of-Service Attacks Arrow to Content
- 8 Steps To Secure Your WordPress Blog
- The Global Information Technology Report 2013 - Growth and Jobs in a Hyperconnected
- The 2013 Data Breach Investigations Report
- The 2013 Global Information Security Workforce Study
- 2013 Global Information Security Workforce
- Top 10 iPhone Security Tips
- Checklist To Prepare Yourself In Advance of a DDoS Attack
- FireEye Advanced Threat Report – 2H 2012
- CAMP: Content-Agnostic Malware Protection
- CYBER-SECURITY AND DATA PRIVACY OUTLOOK AND REVIEW: 2013
- 2013 Worldwide Threat Assessment
- D/DoS Incident Response Plan/Runbook
- 10 security best practice guidelines for consumers
- Cloud Computing - Risks, Benefits, and Mission Enhancement for the Intelligence Community
- 10 security best practice guidelines for consumers
- Map of the Internet: This mobile app visualizes the Internet in 3D
- Comprehensive Study on Cybercrime
- Overview of current cyber attacks
- Vulnerability Summary for the Week of January 21, 2013
- Big Data Analytics in Cyber Defense – A Groundbreaking New Study by the Ponemon Institute
- Comprehensive Study on Cybercrime Expert Group
- Comprehensive Study on Cybercrime
- Mitigating Distributed Denial-of-Service Attacks
- PunkSCAN+1.2.x+Deployment+Guide
- Raising the Bar for Cybersecurity
- Advanced Persistent Threat Awareness Study Results
- (U)Vulnerabilities in Blackberry Enterprise Server could allow Remote Code Execution
- (U)Vulnerabilities in Arcsight Components could cause Remote Disclosure of Information
- APT1 -Exposing One of China’s Cyber Espionage Units
- APT1 - Report Appendix
- Executive Order -- Improving Critical Infrastructure Cybersecurity
- Fact Sheet: Presidential Policy Directive on Critical Infrastructure Security and Resilience
- Fact Sheet: Executive Order on Improving Critical Infrastructure Cybersecurity
- Presidential Policy Directive -- Critical Infrastructure Security and Resilience
- Five Myths Regarding Privacy and Law Enforcement: Access to Personal Information in the European Union and the United States
Ebola
- 2014 Ebola Outbreak in West Africa - Case Counts – February 3, 2015
- FDA – Ebola Outbreak Information – October 29, 2014
- HHS - Office of Preparedness and Response – October 29, 2014
- FAA – Ebola Statement – October 29, 2014
- OSHA – Ebola Information – October 29, 2014
- National Association of County and City Health Officials – What Local Health Departments Need to Know about Ebola – October 29, 2014
- US-CERT – Ebola Phishing Scams and Malware Campaigns – October 27, 2014
- NGA – Ebola Products – October 27, 2014
- CDC – Could It Be Ebola? – October 24, 2014
- NYC Department of Health and Mental Hygiene – Ebola Information – October 24, 2014
- CDC – Ebola Factsheet – October 20, 2014
- SIFMA - Ebola Virus Preparedness and Resources – October 20, 2014
- CDC – Ebola Algorithm For Returned Traveler – October 17, 2014
- CDC – EMS Ebola Preparedness Checklist – October 17, 2014
- CDC – Ebola Fact Sheet: Active Steps Related to Hospital Preparedness – October 17, 2014
- CDC – Healthcare Facility Checklist for Ebola – October 17, 2014
- DHS and CDC – Ebola Airport Screening Fact Sheet – October 17, 2014
- WHO - Transmission of the Ebola Virus Among Humans – October 8, 2014
- CDC – Ebola Information – October 1, 2014
- CDC – Ebola Confirmed in the US – October 1, 2014
Foreign Public Sector
- UK CPNI – Improving Defenses Against Targeted Attack – July 28, 2014
- UK - Cyber Essentials Scheme: Assurance Framework – June 9, 2014
- UK – Cyber Essentials Scheme Summary – June 9, 2014
- OAS/CICTE Regional Cyber Security Symposium
- Desktop Cyber Exercise
- Resilience Information
- Mitigating the impact of security incidents
- Design and Operational Guide to Protect against "Advanced Persistent Threats"
- The System Design Guide for Thwarting Targeted Email Attacks
- ENISA Threat Landscape 2013 - Overview of current and emerging cyber-threats
- Smart Grid Threat Landscape and Good Practice Guide
- Guidelines for Trust Service Providers
- Power Supply Dependencies in the Electronic Communications Sector
- ENISA Releases Guide for Defending Against Attacks on Industrial Control Systems
- Malware Information Sharing Platform
- UK Cyber Security Standards
- ENISA new good practice guide for CERTs - Issuing alerts, warnings and announcements
- Identity Proofing and Verification of an Individual
- Incident Reporting for Cloud Computing
- Cyber Security in Corporate Finance
- End User Devices Security and Configuration Guidance
- Cyber security: competitive analysis of the UK sector
- Best practice security for a range of Mobile Devices
- Mobile Devices - Guide for Implementers
- Mobile Devices - Guide for Managers
- Mobile Devices - Executive Briefing Paper
- National Cyber Security Strategies in the World
- Influencing company boards
- Good Practice Guide: Identity Proofing and Verification of an Individual
- ZeuS-P2P monitoring and analysis
- The Fog of Cyber Defence
- Defense White Paper Outlines French Cyberwarfare Priorities
GAO (Government Accountability Office) Reports
- Cybersecurity: A Better Defined and Implemented National Strategy Is Needed to Address Persistent Challenges, by Gregory C. Wilshusen, director, information security issues, before the Senate Committee on Commerce, Science, and Transportation and the Senate Committee on Homeland Security and Governmental Affairs. GAO-13-462T, March 7 | Highlights
- Information Sharing: Federal Agencies Are Helping Fusion Centers Build and Sustain Capabilities and Protect Privacy, but Could Better Measure Results. GAO-10-972, September 29 - Highlights
Hurricanes
Hurricane Matthew
- Drew Breakspear Proclamation - FLOFR - October 5, 2016
- Governor Scott State of Emergency Hurricane Matthew – FL Gov. - October 5, 2016
Other Resources
- FEMA: Less than a Month Until 2014 Atlantic Hurricane Season Begins – June 6, 2014
- NOAA: Hurricane Basics – June 6, 2014
- Hurricane Sandy Rebuilding Strategy: In Brief – June 6, 2014
- Hurricane Preparedness: Effects of Late Activations on Response Efforts – June 6, 2014
- NHC Hurricane Preparedness Week
- Hurricanes from ready.gov
- NHC Hurricane Preparedness: Hazards
- NHC Hurricane Preparedness: Watches & Warnings
- 2012 Virginia Hurricane Evacuation Guide
- 2012 Virginia Hurricane Information
National Infrastructure Protection Program
- DHS - National CISR Research and Development Plan – December 2, 2015
- DHS – NIAC Executive Collaboration for the Nation's Strategic Critical Infrastructure: Final Report and Recommendations – April 30, 2015
- DHS – CISR Toolkit – November 13, 2014
- DHS – Critical Infrastructure Security Resilience Month – November 10, 2014
- NIPP 2013: Partnering for Critical Infrastructure Security and Resilience
NIST: National Institute of Standards and Technology
- NIST – DRAFT Small Business Information Security: The Fundamentals – December 17, 2014
- NIST – Update On The Cybersecurity Framework – August 1, 2014
- Guidelines for Managing and Securing Mobile Devices in the Enterprise (Draft)
- Security and Privacy Controls for Federal Information Systems and Organizations, NIST Special Publication 800-53, Revision 4
- Developing a Framework To Improve Critical Infrastructure Cybersecurity
- NIST Seeks Comments to Final Public Draft of Major Federal Cybersecurity Document - Comments Due by March 1, 2013
- NIST crowns next-gen hash algorithm Keccak as official SHA-3
Other
- Workshop on the Social, Economic and Workforce Implications of Big Data Analytics and Decision-making – December 2, 2015
- NYC – Excavation Safety Alert – February 13, 2015
- FBI Safety and Security for the Business Professional Traveling Abroad Brochure
- Consumer Alert
- Office of Information Policy - FOIA Post
- National Strategy for Trusted Identities in Cyberspace: Blog
- National Strategy for Trusted Identities in Cyberspace
Pandemic Flu
- NYC Health– Legionnaires’ Disease FAQ – August 6, 2015
- NYC Health– Legionnaires’ Disease FAQ (Spanish) – August 6, 2015
- CDC – Pandemic Response Framework – September 25, 2014
- CDC MERS in the Arabian Peninsula
- CDC Middle East Respiratory Syndrome (MERS): Frequently Asked Questions and Answers
- CDC Interim Guidelines for Collecting, Handling, and Testing Clinical Specimens from Patients Under Investigation (PUIs) for Middle East Respiratory Syndrome Coronavirus (MERS-CoV)
- CDC Interim Infection Prevention and Control Recommendations for Hospitalized Patients with Middle East Respiratory Syndrome Coronavirus (MERS-CoV)
- CDC Case Definitions: Patient Under Investigation (PUI)
- Seasonal Influenza (Flu)
Regional Coalitions
- DHS – The Partnership Quarterly – July 21, 2014
- Alabama Recovery Coalition for the Financial Sector
- Arizona FIRST Coalition
- Arkansas Bankers Coalition for Disasters and Emergencies
- Bay Area Response Coalition
- Central California FIRST
- Chicago FIRST
- Financial Recovery Coalition of North Carolina
- Hawaii FIRST
- Louisiana Bankers Emergency Preparedness Coalition
- Northern Ohio FIRST
- Southern California FIRST
Research and Development
- Graphene goes plasmonic
- Physical Review E "Relativistic statistical arbitrage"
- BBC News – Tsunami Alerts
- National Cyber Defense Financial Services Workshop Final Report
- "The quick and the dead: when reaction beats intention" Proceedings of the Royal Society
- Federal Plan for Advanced Networking Research and Development
Training Resources
- DHS Critical Infrastructure Training – October 23, 2014
- FEMA - Are You Ready? An In-depth Guide to Citizen Preparedness, September 24, 2014
- 2014 National Preparedness Month Toolkit – August 22, 2014
- Joint Critical Infrastructure Partnership Webinar Series – August 18, 2014
- Bomb Threat Stand-off Card
- Independent Study Course: Implementing Critical Infrastructure Protection Programs - IS-921
- NATO Offers Cyber Defense Awareness Online Course
- TRANSITS training
- Free Digital Forensic Courses
- Free Cryptography Course