ECB Publishes the Cyber Resilience Oversight Expectations
ECB published the final cyber resilience oversight expectations for financial market infrastructures (FMIs). The cyber resilience oversight expectations are based on the global guidance on cyber resilience for financial market infrastructures. This guidance was published by CPMI and IOSCO in June 2016. ECB also published a high-level overview of the comments received during the consultation and summarized the main amendments to the cyber resilience oversight expectations.
The cyber resilience oversight expectations provide FMIs with detailed steps on how to operationalize the guidance, provide overseers with clear expectations to assess FMIs under their responsibility, and provide the basis for a meaningful discussion between the FMIs and their respective overseers. During the consultation, ECB received responses from 20 entities, including FMIs, banks, banking communities, and associations. Comments in the public consultation mostly focused on four aspects:
- Level of prescriptiveness of the expectations
- Three levels of cyber maturity and how these correspond to other international cybersecurity frameworks, which also have maturity models
- Process for oversight assessments against the cyber resilience oversight expectations
- Need for harmonization across different jurisdictions and among regulators, to reduce the fragmentation of regulatory expectations and facilitate oversight convergence
Cyber resilience is an important aspect of the operational resilience of FMIs and efficient operation of FMIs is essential for maintaining and enhancing financial stability. If not properly managed, FMIs can be sources of financial shocks, such as credit losses. They can also be a major channel through which these shocks are transmitted across domestic and international financial markets.
Related Links
- Press Release
- Cyber Resilience Oversight Guidance (PDF)
- ECB Response to Consultation
- Responses from Entities (ZIP)
- CPMI-IOSCO Guidance on Cyber Resilience
Keywords: Europe, EU, Banking, PMI, FMI, Cyber Resilience, Cyber Risk, Operational Risk, ECB
Previous Article
EIOPA Publishes Q&A on Regulations and GuidelinesRelated Articles
|
News
US Agencies Adopt Rule to Exclude Community Banks from Volcker RuleUS Agencies (CFTC, FDIC, FED, OCC, and SEC) adopted a final rule to exclude community banks from the Volcker Rule, in line with amendments to certain sections of the Economic Growth, Regulatory Relief, and Consumer Protection (EGRRCP) Act.
July 22, 2019
WebPage
Regulatory News
|
|
News
US Agencies Adopt Amendments to Simplify Regulatory Capital RulesUS Agencies (FDIC, FED, and OCC) adopted a final rule that reduces regulatory burden by simplifying several requirements in the regulatory capital rules for banks.
July 22, 2019
WebPage
Regulatory News
|
|
News
IA of Hong Kong Delegates Inspection and Investigation Powers to HKMAHKMA and IA of Hong Kong jointly issued a statement announcing the delegation of the inspection and investigation powers of IA to HKMA, pursuant to the statutory regulatory regime for insurance intermediaries under the Insurance Ordinance.
July 19, 2019
WebPage
Regulatory News
|
|
News
FSB Extends Implementation Timeline for Policy Recommendations on SFTsFSB announced adjustments to the implementation timelines for its recommendations on securities financing transactions (SFTs), specifically those related to the minimum haircut standards for non-centrally cleared SFTs.
July 19, 2019
WebPage
Regulatory News
|
|
News
EBA Single Rulebook Q&A: Third Update for July 2019EBA published answers to six questions under the Single Rulebook question and answer (Q&A) tool this week.
July 19, 2019
WebPage
Regulatory News
|
|
News
EBA Report Assesses Regulatory Framework for Fintech ActivitiesEBA published the findings of its analysis on the regulatory framework applicable to fintech firms when accessing the market.
July 18, 2019
WebPage
Regulatory News
|
|
News
OSFI Revises Capital Requirements for Operational Risk for BanksOSFI is revising its capital requirements for operational risk, in line with the final Basel III revisions published by BCBS in December 2017.
July 18, 2019
WebPage
Regulatory News
|
|
News
OSFI Consults on Revised Principles for Management of Liquidity RiskOSFI proposed revisions to Guideline B-6 on the principles for the management of liquidity risk.
July 18, 2019
WebPage
Regulatory News
|
|
News
ESMA Guidance on Disclosures for Credit Rating Sustainability IssuesESMA published the technical advice on sustainability considerations in the credit rating market, along with the final guidelines on disclosure requirements applicable to credit ratings.
July 18, 2019
WebPage
Regulatory News
|
|
News
FASB Issues Q&A on Estimation of Expected Credit Losses by FirmsFASB issued a second question-and-answer (Q&A) document that addresses more than a dozen frequently asked questions related to the Accounting Standards Update No. 2016-13 titled “Financial Instruments—Credit Losses (Topic 326): Measurement of Credit Losses on Financial Instruments.”
July 17, 2019
WebPage
Regulatory News
|
