Mandates banks and select OFIs to deploy and use a standard cybersecurity self-assessment tool.
Banks and select other financial institutions.