The Financial Stability Board (FSB) has published its finalised Format for Incident Reporting Exchange (FIRE), together with a press release and updated webpage. FIRE provides a standardised format for financial institutions to report cyber and other operational incidents to national regulators. It is intended to provide a foundation upon which to build for jurisdictions which do not currently have standardised reporting formats, and to be interoperable with existing systems for those jurisdictions with existing frameworks. National regulators are free to decide the extent to which they wish to adopt FIRE, if they do at all. The framework specifies the information items to be included in reports, identifying items which are essential and optional, as well as a baseline view of the reporting of individual information items against each reporting phase. The FSB will hold a workshop with industry and authorities two years after FIRE is finalised (e.g., in 2027) to take stock of their experiences with FIRE, including implementation challenges.
[View source.]
