ECB Publishes Services Procurement Guidelines for TIBER-EU Tests
ECB published the Services Procurement Guidelines, which are referred to in, and are an integral part of, the Threat Intelligence-Based Ethical Red Teaming (TIBER-EU) framework. The guidelines set out in detail the different elements of TIBER-EU procurement. TIBER-EU framework enables European and national authorities to work with financial infrastructures and institutions to put in place a program to test and improve their resilience against sophisticated cyber attacks. Due to the sensitive nature of TIBER-EU tests, entities need to carefully select threat intelligence and red teaming providers that can provide an appropriate level of professional expertise and support for conducting the test.
The first part of the document sets out the requirements and standards that must be met by threat intelligence providers to deliver recognized TIBER-EU tests and offers guiding principles and selection criteria for entities, as they look to procure services from prospective providers. Then, the document sets out the requirements and standards that must be met by red teaming providers to deliver recognized TIBER-EU tests and offer guiding principles and selection criteria for entities, as they look to procure services from prospective providers. Next, it provides guidance to authorities that are looking to implement TIBER-EU at the national and European levels, with regard to procurement. Annex 1 provides a list of certifications that staff members and providers may be, depending on the case, required to possess. Annexes 2-5 provide questions that entities could use when considering prospective providers and agreement checklists to assist the procurement functions during their procurement process.
The guidelines are directed at authorities responsible for the adoption, implementation, and management of the TIBER-EU Framework at national and European levels; entities looking to undertake TIBER-EU tests; organizations interested in providing cyber threat intelligence services under TIBER-EU; organizations interested in providing red team testing services under TIBER-EU; and accreditation and certification providers. As the TIBER-EU Framework is implemented across EU, the TIBER-EU Knowledge Center (TKC) will monitor the evolution of the threat intelligence and red team testing market and update the requirements, if necessary. TKC will undertake this task by closely liaising with the authorities that adopt the TIBER-EU Framework, the entities that undertake the tests, and the threat intelligence/red teaming providers that deliver the tests.
Related Link: Guidelines (PDF)
Keywords: Europe, EU, Banking, Insurance, Securities, PMI, Cyber Risk, TIBER-EU, Cyber Resilience, Procurement Services Guidelines, ECB
Previous Article
ESMA Responds to EIOPA Questions on AIFMDRelated Articles
|
News
EBA Single Rulebook Q&A: Fourth Update for March 2019EBA published answers to five questions under the Single Rulebook question and answer (Q&A) updates for this week.
March 22, 2019
WebPage
Regulatory News
|
|
News
ECB Updates Validation Checks and List of Identifiers Under AnaCreditECB updated the AnaCredit validation checks (Version 1.4) and the list of national identifiers (version 2.4) for AnaCredit reporting.
March 21, 2019
WebPage
Regulatory News
|
|
News
BCBS Publishes Results of the Basel III Monitoring ExerciseBCBS published results of the Basel III monitoring exercise based on data as of June 30, 2018.
March 20, 2019
WebPage
Regulatory News
|
|
News
EBA, FCA, and PRA Agree on MoU Template for Supervisory CooperationEBA, FCA, and PRA announced that they have agreed on a template for the Memorandum of Understanding (MoU) that sets out the expectations for supervisory cooperation and information-sharing arrangements between UK and EU/European Economic Area national authorities.
March 20, 2019
WebPage
Regulatory News
|
|
News
HKMA Publishes CoP on Loss-Absorbing Capacity Requirements of BanksHKMA issued, in relation to the Financial Institutions Resolution (Loss-Absorbing Capacity Requirements—Banking Sector) Rules (LAC Rules) a chapter of a code of practice (LAC CoP) under section 196 of the Financial Institutions Resolution Ordinance (FIRO).
March 20, 2019
WebPage
Regulatory News
|
|
News
EBA Publishes Reports Monitoring the Implementation of Basel III in EUEBA published two reports measuring the impact of implementing the final Basel III reforms and monitoring the implementation of liquidity measures in EU.
March 20, 2019
WebPage
Regulatory News
|
|
News
BCBS Publishes Results of Survey on Proportionality in Bank RegulationBCBS published a report presenting the results of a survey conducted on proportionality practices in bank regulation and supervision.
March 19, 2019
WebPage
Regulatory News
|
|
News
US Agencies Adopt Interim Rule to Facilitate Transfers of Legacy SwapsUS Agencies (FCA, FDIC, FED, FHFA, and OCC) are adopting and inviting comments on an interim final rule.
March 19, 2019
WebPage
Regulatory News
|
|
News
EBA Updates List of Other Systemically Important Institutions in EUEBA updated the 2018 list of other systemically important institutions (O-SIIs) in EU. The list also reflects the additional capital buffers that the relevant authorities have set for the identified O-SIIs.
March 19, 2019
WebPage
Regulatory News
|
|
News
HKMA Expects Banks to Manage Risks Related to Crypto-Asset ExposuresHKMA issued a statement announcing that it expects authorized institutions to take note of the BCBS statement on crypto-assets and its prudential expectations.
March 18, 2019
WebPage
Regulatory News
|
