FSSCC CESG Letter to Regulators
When the U.S. Department of the Treasury and Financial Services Sector Coordinating Council (FSSCC) published documents under the joint Cloud Executive Steering Group (CESG) construct we intended to provide financial institutions of all sizes with the most effective practices for secure cloud adoption. Our public and private sector CESG co-chairs also determined that the completed work should provide more than a roadmap for financial institutions. Together, we have concluded there is still a need for broader regulatory requirements to provide assurance on the security and resiliency of cloud services utilized by financial institutions. This letter to our regulatory counterparts outlines the actions we have taken to date and includes areas where we believe that additional regulatory assistance incorporating key aspects of these deliverables would greatly benefit the continued security and resilience of the financial services sector.