10.09.2020

OCC Assessed $60m Penalty Against Morgan Stanley

10.09.2020
Shanny Basar
OCC Assessed $60m Penalty Against Morgan Stanley

The Office of the Comptroller of the Currency (OCC) today assessed a $60 million civil money penalty against Morgan Stanley Bank, N.A., and Morgan Stanley Private Bank, N.A. (“the banks”)

The OCC took these actions based on the banks’ failure to exercise proper oversight of the 2016 decommissioning of two Wealth Management business data centers located in the U.S. Among other things, the banks failed to effectively assess or address risks associated with decommissioning its hardware; failed to adequately assess the risk of subcontracting the decommissioning work, including exercising adequate due diligence in selecting a vendor and monitoring its performance; and failed to maintain appropriate inventory of customer data stored on the decommissioned hardware devices.

In 2019, the banks experienced similar vendor management control deficiencies in connection with decommissioning other network devices that also stored customer data. The OCC found the noted deficiencies constitute unsafe or unsound practices and resulted in noncompliance with 12 CFR Part 30, Appendix B, “Interagency Guidelines Establishing Information Security Standards.”

The OCC penalty will be paid to the U.S. Treasury.

Source: OCC

Related articles

  1. J.P. Morgan has to pay an $850,000 civil monetary penalty and BNP Paribas $6m.

  2. M&A activity had the slowest opening six months in two years.

  3. Blockchain-enabled platform reduces risk and operational costs and enhances liquidity for market participants.

  4. FX Option Volumes Flat Despite Brexit Vote

    Automated, digital-first payments platform will help financial firms with spot FX and international payments.

  5. Consortium is creating the first open market electronic trading platform for syndicated loans and CLOs.