The three federal banking regulatory agencies have issued an advance notice of proposed rulemaking (ANPR) that seeks industry comments on enhanced cyber-security risk-management and resilience standards. The requirements would apply to both large, interconnected entities under their supervision and to services provided by third parties to these firms.