OCC can’t fully determine computer security until actual attack, comptroller says

22 January 2019 9:26am
The US Office of the Comptroller of the Currency won’t know how secure its computers are until an actual cyberattack takes place, despite extensive threat preparations at the agency and the banks it oversees, Comptroller Joseph Otting said.

“The biggest challenge with cyber is, we don’t really know until it happens,” he told a Washington roundtable of reporters this week. “We spend an enormous amount of time on this topic; we spend lots of dollars every year.”

Otting added that OCC has established communication protocols in the last year to make sure senior officials can be contacted in the event of an emergency. All have satellite phones, he said.