Amazon Web Services Commentary to the Advance Notice of Proposed Rulemaking (ANPR) on Enhanced Cyber Risk Management Standards This document is provided for informational and discussion purposes, to assist in the development of the ANPR for Cyber Risk Management document. This document is solely for use of parties who receive it directly from Amazon Web Services. It may not be distributed or forwarded to other parties without the express consent of Amazon Web Services. Not to be distributed or forwarded without the express consent of AWS 1 17 February 2017 February 17, 2017 Robert deV. Frierson Secretary Board of Governors of the Federal Reserve System 20th Street and Constitution Avenue NW Washington, DC 20551 Legislative and Regulatory Activities Division Office of the Comptroller of the Currency 400 7th Street SW Suite 3E-218, mail stop 9W-11 Washington, DC 20219 Robert E. Feldman Executive Secretary Attention: Comments Federal Deposit Insurance Corporation 550 17th Street NW Washington, DC 20429 Via e-mail to:
[email protected] (Board of the Federal Reserve (Board))
[email protected] (Office of the Comptroller of Currency (OCC))
[email protected] (Federal Deposit Insurance Corporation (FDIC)) RE: Docket No. R-1550 and RIN 7100-AE-61 (Board) Docket ID OCC-2016-0016 (OCC) RIN 3064-AE45 (FDIC) Amazon comments in response to Banking Agencies’ Advanced Notice of Proposed Rulemaking regarding Enhanced Cyber Risk Management Standards Dear Mr. Frierson, Mr. Feldman, et al.: Amazon Web Services (AWS) welcomes this opportunity to share our comments with the Federal Financial Institutions Examination Council (FFIEC) on the Advance Notice of Proposed Rulemaking (ANPR) on Enhanced Cyber Risk Management Standards (Framework) released for comment in October 2016.