DTCC’s Bodson criticises ‘dumb-ass’ cyber risk rules

Requirement to recover from cyber attack within two hours unrealistic, he says

Two-hour recovery period in event of cyber attack deemed 'ridiculous'

The chief executive of the Depository Trust & Clearing Corporation (DTCC) has hit out at the “dumb-ass” rules governing how quickly market utilities need to recover following a cyber attack.

Michael Bodson, president and chief executive of the DTCC, said the legislation, dubbed regulation SCI (Systems Compliance and Integrity) and put into effect by the US Securities and Exchange Commission in February 2015, requires entities to be able to recover from a cyber attack within two hours – a

Only users who have a paid subscription or are part of a corporate subscription are able to print or copy content.

To access these options, along with all other subscription benefits, please contact info@risk.net or view our subscription options here: http://subscriptions.risk.net/subscribe

You are currently unable to copy this content. Please contact info@risk.net to find out more.

Sorry, our subscription options are not loading right now

Please try again later. Get in touch with our customer services team if this issue persists.

New to Risk.net? View our subscription options


Want to know what’s included in our free membership? Click here

This address will be used to create your account

You need to sign in to use this feature. If you don’t have a Risk.net account, please register for a trial.

Sign in
You are currently on corporate access.

To use this feature you will need an individual account. If you have one already please sign in.

Sign in.

Alternatively you can request an individual account here