General Information & Client Service
  • Americas: +1.212.553.1653
  • Asia: +852.3551.3077
  • China: +86.10.6319.6580
  • EMEA: +44.20.7772.5454
  • Japan: +81.3.5408.4100
Media Relations
  • New York: +1.212.553.0376
  • London: +44.20.7772.5456
  • Hong Kong: +852.3758.1350
  • Tokyo: +813.5408.4110
  • Sydney: +61.2.9270.8141
  • Mexico City: +001.888.779.5833
  • Buenos Aires: +0800.666.3506
  • São Paulo: +0800.891.2518
August 07, 2018

ECB published the Services Procurement Guidelines, which are referred to in, and are an integral part of, the Threat Intelligence-Based Ethical Red Teaming (TIBER-EU) framework. The guidelines set out in detail the different elements of TIBER-EU procurement. TIBER-EU framework enables European and national authorities to work with financial infrastructures and institutions to put in place a program to test and improve their resilience against sophisticated cyber attacks. Due to the sensitive nature of TIBER-EU tests, entities need to carefully select threat intelligence and red teaming providers that can provide an appropriate level of professional expertise and support for conducting the test.

The first part of the document sets out the requirements and standards that must be met by threat intelligence providers to deliver recognized TIBER-EU tests and offers guiding principles and selection criteria for entities, as they look to procure services from prospective providers. Then, the document sets out the requirements and standards that must be met by red teaming providers to deliver recognized TIBER-EU tests and offer guiding principles and selection criteria for entities, as they look to procure services from prospective providers. Next, it provides guidance to authorities that are looking to implement TIBER-EU at the national and European levels, with regard to procurement. Annex 1 provides a list of certifications that staff members and providers may be, depending on the case, required to possess. Annexes 2-5 provide questions that entities could use when considering prospective providers and agreement checklists to assist the procurement functions during their procurement process.

The guidelines are directed at authorities responsible for the adoption, implementation, and management of the TIBER-EU Framework at national and European levels; entities looking to undertake TIBER-EU tests; organizations interested in providing cyber threat intelligence services under TIBER-EU; organizations interested in providing red team testing services under TIBER-EU; and accreditation and certification providers. As the TIBER-EU Framework is implemented across EU, the TIBER-EU Knowledge Center (TKC) will monitor the evolution of the threat intelligence and red team testing market and update the requirements, if necessary. TKC will undertake this task by closely liaising with the authorities that adopt the TIBER-EU Framework, the entities that undertake the tests, and the threat intelligence/red teaming providers that deliver the tests.

 

Related Link: Guidelines (PDF)

Keywords: Europe, EU, Banking, Insurance, Securities, PMI, Cyber Risk, TIBER-EU, Cyber Resilience, Procurement Services Guidelines, ECB

Related Articles
News

EBA Single Rulebook Q&A: Fourth Update for March 2019

EBA published answers to five questions under the Single Rulebook question and answer (Q&A) updates for this week.

March 22, 2019 WebPage Regulatory News
News

ECB Updates Validation Checks and List of Identifiers Under AnaCredit

ECB updated the AnaCredit validation checks (Version 1.4) and the list of national identifiers (version 2.4) for AnaCredit reporting.

March 21, 2019 WebPage Regulatory News
News

BCBS Publishes Results of the Basel III Monitoring Exercise

BCBS published results of the Basel III monitoring exercise based on data as of June 30, 2018.

March 20, 2019 WebPage Regulatory News
News

EBA, FCA, and PRA Agree on MoU Template for Supervisory Cooperation

EBA, FCA, and PRA announced that they have agreed on a template for the Memorandum of Understanding (MoU) that sets out the expectations for supervisory cooperation and information-sharing arrangements between UK and EU/European Economic Area national authorities.

March 20, 2019 WebPage Regulatory News
News

HKMA Publishes CoP on Loss-Absorbing Capacity Requirements of Banks

HKMA issued, in relation to the Financial Institutions Resolution (Loss-Absorbing Capacity Requirements—Banking Sector) Rules (LAC Rules) a chapter of a code of practice (LAC CoP) under section 196 of the Financial Institutions Resolution Ordinance (FIRO).

March 20, 2019 WebPage Regulatory News
News

EBA Publishes Reports Monitoring the Implementation of Basel III in EU

EBA published two reports measuring the impact of implementing the final Basel III reforms and monitoring the implementation of liquidity measures in EU.

March 20, 2019 WebPage Regulatory News
News

BCBS Publishes Results of Survey on Proportionality in Bank Regulation

BCBS published a report presenting the results of a survey conducted on proportionality practices in bank regulation and supervision.

March 19, 2019 WebPage Regulatory News
News

US Agencies Adopt Interim Rule to Facilitate Transfers of Legacy Swaps

US Agencies (FCA, FDIC, FED, FHFA, and OCC) are adopting and inviting comments on an interim final rule.

March 19, 2019 WebPage Regulatory News
News

EBA Updates List of Other Systemically Important Institutions in EU

EBA updated the 2018 list of other systemically important institutions (O-SIIs) in EU. The list also reflects the additional capital buffers that the relevant authorities have set for the identified O-SIIs.

March 19, 2019 WebPage Regulatory News
News

HKMA Expects Banks to Manage Risks Related to Crypto-Asset Exposures

HKMA issued a statement announcing that it expects authorized institutions to take note of the BCBS statement on crypto-assets and its prudential expectations.

March 18, 2019 WebPage Regulatory News
RESULTS 1 - 10 OF 2780