Featured Product

    ECB Publishes Services Procurement Guidelines for TIBER-EU Tests

    August 07, 2018

    ECB published the Services Procurement Guidelines, which are referred to in, and are an integral part of, the Threat Intelligence-Based Ethical Red Teaming (TIBER-EU) framework. The guidelines set out in detail the different elements of TIBER-EU procurement. TIBER-EU framework enables European and national authorities to work with financial infrastructures and institutions to put in place a program to test and improve their resilience against sophisticated cyber attacks. Due to the sensitive nature of TIBER-EU tests, entities need to carefully select threat intelligence and red teaming providers that can provide an appropriate level of professional expertise and support for conducting the test.

    The first part of the document sets out the requirements and standards that must be met by threat intelligence providers to deliver recognized TIBER-EU tests and offers guiding principles and selection criteria for entities, as they look to procure services from prospective providers. Then, the document sets out the requirements and standards that must be met by red teaming providers to deliver recognized TIBER-EU tests and offer guiding principles and selection criteria for entities, as they look to procure services from prospective providers. Next, it provides guidance to authorities that are looking to implement TIBER-EU at the national and European levels, with regard to procurement. Annex 1 provides a list of certifications that staff members and providers may be, depending on the case, required to possess. Annexes 2-5 provide questions that entities could use when considering prospective providers and agreement checklists to assist the procurement functions during their procurement process.

    The guidelines are directed at authorities responsible for the adoption, implementation, and management of the TIBER-EU Framework at national and European levels; entities looking to undertake TIBER-EU tests; organizations interested in providing cyber threat intelligence services under TIBER-EU; organizations interested in providing red team testing services under TIBER-EU; and accreditation and certification providers. As the TIBER-EU Framework is implemented across EU, the TIBER-EU Knowledge Center (TKC) will monitor the evolution of the threat intelligence and red team testing market and update the requirements, if necessary. TKC will undertake this task by closely liaising with the authorities that adopt the TIBER-EU Framework, the entities that undertake the tests, and the threat intelligence/red teaming providers that deliver the tests.

     

    Related Link: Guidelines (PDF)

    Keywords: Europe, EU, Banking, Insurance, Securities, PMI, Cyber Risk, TIBER-EU, Cyber Resilience, Procurement Services Guidelines, ECB

    Related Articles
    News

    EIOPA Forms Consultative Expert Group on Digital Ethics in Insurance

    EIOPA established the Consultative Expert Group on Digital Ethics in Insurance to assist EIOPA in the development of digital responsibility principles in insurance.

    September 17, 2019 WebPage Regulatory News
    News

    FASB Proposes Taxonomy Changes Related to Topics 848 and 470

    FASB proposed taxonomy improvements for the proposed Accounting Standards Update on topic 848 on facilitation of effects of reference rate reform on financial reporting.

    September 16, 2019 WebPage Regulatory News
    News

    BoE Statement on Recalculating Transitional Measures Under Solvency II

    BoE notified that it will be willing to accept applications from firms to recalculate transitional measure on technical provisions (TMTP) as at September 30, 2019.

    September 16, 2019 WebPage Regulatory News
    News

    BIS Hosts Conference to Discuss Issues from Emergence of Stablecoins

    BIS hosted a conference in Basel to discuss policy and regulatory issues posed by the emergence of stablecoin initiatives backed by financial institutions and large technology companies.

    September 16, 2019 WebPage Regulatory News
    News

    BIS Paper on Embedded Supervision of Blockchain-Based Financial Market

    BIS published a working paper that investigates ways to regulate and supervise blockchain-based financial markets.

    September 16, 2019 WebPage Regulatory News
    News

    BoE Paper on Market-Implied Systemic Risk and Shadow Capital Adequacy

    BoE published a working paper that presents a forward-looking approach to measure systemic solvency risk.

    September 13, 2019 WebPage Regulatory News
    News

    HKMA Consults on Policy Module on Pillar 2 Supervisory Review Process

    HKMA is consulting on the revised Supervisory Policy Manual module CA-G-5 that sets out the HKMA approach to conducting the supervisory review process under Pillar 2.

    September 13, 2019 WebPage Regulatory News
    News

    PRA Publishes Waiver by Consent of Continuity of Access Rules

    PRA published a new waiver by consent to waive the Continuity of Access requirements contained in the Depositor Protection Part of the PRA Rulebook (DPP).

    September 13, 2019 WebPage Regulatory News
    News

    EBA Single Rulebook Q&A: Second Update for September 2019

    EBA updated the Single Rulebook question and answer (Q&A) tool with answers to three questions.

    September 13, 2019 WebPage Regulatory News
    News

    BoE Publishes Update on Meeting of Working Group on Risk-Free Rates

    BoE published the minutes of the July meeting of working group on sterling risk-free reference rates.

    September 13, 2019 WebPage Regulatory News
    RESULTS 1 - 10 OF 3827