US Financial Crimes Enforcement Network Issues Advisory and Frequently Asked Questions on Reporting Cyber-Events in Suspicious Activity Reports

Shearman & Sterling LLP
Contact

Shearman & Sterling LLP

On October 25, 2016, FinCEN issued an Advisory and related Frequently Asked Questions (FAQs) regarding the reporting of cyber-events, cyber-enabled crime and cyber-related information through Suspicious Activity Reports (SARs).

According to FinCEN, while suspicious transactions may not always involve a cyber-event, relevant cyber-related information should still be included in SARs when available (e.g., Internet Protocol (IP) addresses and accompanying timestamps associated with fraudulent wire transfers being reported). Similarly, the FinCEN guidance provides that when suspicious transactions do involve cyber-events, a financial institution should include in SARs all relevant and available information regarding the suspicious transactions and the cyber-event - including the type, magnitude and methodology of the cyber-event as well as signatures and facts on a network or system that indicate a cyber-event. The advisory also encourages collaboration between in-house BSA/AML and cybersecurity units and sharing information with other financial institutions to the extent permitted under Section 314(b) of the USA PATRIOT Act.

Among other things, the FAQs explain the circumstances in which an SAR must be filed in connection with an unsuccessful cyber-event and provide for the submission of a single, cumulative SAR to report multiple cyber-events that are similar in nature and share common identifiers or are believed to be related, connected or part of a larger scheme.

View advisory and FAQs.
 

DISCLAIMER: Because of the generality of this update, the information provided herein may not be applicable in all situations and should not be acted upon without specific legal advice based on particular situations.

© Shearman & Sterling LLP | Attorney Advertising

Written by:

Shearman & Sterling LLP
Contact
more
less

Shearman & Sterling LLP on:

Reporters on Deadline

"My best business intelligence, in one easy email…"

Your first step to building a free, personalized, morning email brief covering pertinent authors and topics on JD Supra:
*By using the service, you signify your acceptance of JD Supra's Privacy Policy.
Custom Email Digest
- hide
- hide