Subject: File No. 4-673
From: Michael Utzig
Affiliation: IT Director, Hefren Tillotson, Inc.

March 26, 2014

As evidenced by this panel and simply watching the evening news, it is universally understood that cybersecurity is a high priority. However, some readily available protections are not widely used.

One of the key technologies used for attacks is email. For a relatively long time, there have been standard technologies available to protect email communication, such as SPF and TLS. Improving trust in email would be a good step towards improving cybersecurity. The use of these protections is relatively limited, or the protection is implemented in a way that limits its effectiveness this contrasts the widely accepted importance of cybersecurity.

I'd be interested to hear the panel's opinion on this contradiction. Is there a role for our financial industry to further the use of effective protections across all industries?