2018年-FSB全球金融稳定委员会_Progress_Update_on_Cyber_Lexicon_3页_259kb

G20 Cyber Lexicon Progress Update Summary

Core Content

The document outlines the progress made by the Financial Stability Board (FSB) in developing a cyber lexicon to support cross-border cooperation in addressing cyber security and cyber resilience in the financial sector. This initiative was initiated following the 2017 G20 Finance Ministers and Central Bank Governors (FM&CBG) meeting in Baden-Baden, where the FSB was tasked with creating a common understanding of key terms to enhance financial stability and security.

Main Points

1. Objective

The primary objective of the FSB's cyber lexicon project is to:

• Support the FSB, standard-setting bodies, authorities, and private sector participants in addressing cyber security and cyber resilience in the financial sector.
• Promote a cross-sector common understanding of relevant terminology.
• Assist in assessing and monitoring financial stability risks associated with cyber risk scenarios.
• Facilitate information sharing and guide the development of effective practices.

2. Process for Creating the Lexicon

The FSB has established a working group to develop the lexicon, with the following key aspects:

• Composition: The group is chaired by the US Federal Reserve Board and includes approximately 15 members representing various financial sectors and jurisdictions.
• Scope: The lexicon is intended to focus on core terms relevant to financial sector cyber security and cyber resilience, rather than being a comprehensive list of all technical terms.
• Collaboration: The working group will draw on existing efforts by other organizations, including:
  • CPMI-IOSCO's Guidance on cyber resilience for financial market infrastructures.
  • The G7 Cyber Expert Group.
  • The U.S. National Institute of Standards and Technology (NIST) Glossary of Key Information Security Terms.
  • The International Organization for Standardization (ISO).
• Stakeholder Engagement: The group will engage with the private sector and industry representatives to ensure the lexicon is practical and relevant. This includes:
  • Conducting in-person meetings with industry stakeholders.
  • Periodic consultations with private sector standard-setting bodies.

3. Next Steps and Timeline

The working group has outlined the following indicative timeline for the development and delivery of the lexicon:

Key Information

• The lexicon is not intended to be a full glossary of all cyber-related terms but rather a focused set of terms essential for cross-sector understanding and risk management.
• Stakeholder input is a critical part of the process, particularly from the private sector, to ensure the lexicon is practical and widely accepted.
• The working group is expected to complete the lexicon in time for the G20 Summit in Buenos Aires, with the final version to be delivered in late November 2018.
• The FSB will provide a progress update at the July FM&CBG meeting, which may include the draft lexicon or a consultation document.