As previously communicated, the FedLine® Solutions Security and Resiliency Assurance Program (“Assurance Program”) was implemented earlier this year in response to the evolving security threat landscape. As part of the Assurance Program, organizations and service providers that use FedLine Solutions must:
- Conduct an assessment of their compliance with the Federal Reserve Banks’ FedLine security requirements
- Submit an attestation that they have completed the assessment
Action Item:
Submit your organization’s attestation by December 31, 2021.
If your organization has not already completed the Assurance Program, here are a few steps to help you get started:
- Work with your organization’s End User Authorization Contacts (EUACs) to locate security documentation
The security assessment is an analysis of your organization's security posture relative to the Security Requirements applicable to the FedLine Solutions or Financial Services your organization uses. This information is provided to your organization during the FedLine implementation process and is available to your organization’s EUACs. - Perform the security assessment
Once you have reviewed the applicable Security and Control Procedures for your organization, you are ready to begin the assessment. When performing your security assessment, keep in mind the FedLine Solutions Security Requirements, Operating Circulars and FedLine Security and Control Procedures are intentionally not prescriptive as the applicable controls will be different for each organization based on their use of FedLine Solutions or Financial Services. - Note any deficiencies or gaps identified during the self-assessment
While performing the assessment, your organization should develop a remediation plan to address any deficiencies or gaps that are identified. Your organization is not required to submit the results of your assessment to the Federal Reserve Banks as part of the attestation process. - Submit your attestation by December 31
The electronically signed attestation response is the only document that is required to be submitted to the Federal Reserve Banks. Your organization must submit the assessment by December 31, 2021, to be considered complete for the 2021 calendar year. As a reminder, the Assurance Program will take place on an annual basis
Need additional support?
View frequently asked questions, tips and training opportunities on the Assurance Program Resource Center. If you need assistance with locating or obtaining documentation, please contact the Customer Contact Center. Additionally, your account executive is available to assist you. To find a list of Federal Reserve Bank contacts specific to your organization, use the Find Your Contacts tool.
