ECB Publishes the Cyber Resilience Oversight Expectations
ECB published the final cyber resilience oversight expectations for financial market infrastructures (FMIs). The cyber resilience oversight expectations are based on the global guidance on cyber resilience for financial market infrastructures. This guidance was published by CPMI and IOSCO in June 2016. ECB also published a high-level overview of the comments received during the consultation and summarized the main amendments to the cyber resilience oversight expectations.
The cyber resilience oversight expectations provide FMIs with detailed steps on how to operationalize the guidance, provide overseers with clear expectations to assess FMIs under their responsibility, and provide the basis for a meaningful discussion between the FMIs and their respective overseers. During the consultation, ECB received responses from 20 entities, including FMIs, banks, banking communities, and associations. Comments in the public consultation mostly focused on four aspects:
- Level of prescriptiveness of the expectations
- Three levels of cyber maturity and how these correspond to other international cybersecurity frameworks, which also have maturity models
- Process for oversight assessments against the cyber resilience oversight expectations
- Need for harmonization across different jurisdictions and among regulators, to reduce the fragmentation of regulatory expectations and facilitate oversight convergence
Cyber resilience is an important aspect of the operational resilience of FMIs and efficient operation of FMIs is essential for maintaining and enhancing financial stability. If not properly managed, FMIs can be sources of financial shocks, such as credit losses. They can also be a major channel through which these shocks are transmitted across domestic and international financial markets.
Related Links
- Press Release
- Cyber Resilience Oversight Guidance (PDF)
- ECB Response to Consultation
- Responses from Entities (ZIP)
- CPMI-IOSCO Guidance on Cyber Resilience
Keywords: Europe, EU, Banking, PMI, FMI, Cyber Resilience, Cyber Risk, Operational Risk, ECB
Previous Article
EIOPA Publishes Q&A on Regulations and GuidelinesRelated Articles
|
News
SEC Proposes to Improve Cross-Border Application of SBS RequirementsSEC proposed a package of rule amendments and interpretive guidance to improve the framework for regulating cross-border security-based swaps (SBS) transactions and market participants.
May 24, 2019
WebPage
Regulatory News
|
|
News
US Agencies Propose to Amend Regulatory Framework for Foreign BanksUS Agencies (OCC, FED, and FDIC) proposed a regulatory framework for foreign banks operating in the U.S. that would more closely match the rules for foreign banks with the risks they pose to the U.S. financial system.
May 24, 2019
WebPage
Regulatory News
|
|
News
FSB to Evaluate Effects of Too-Big-To-Fail Reforms for Systemic BanksFSB is seeking feedback as part of its evaluation of the effects of the too-big-to-fail reforms for banks.
May 23, 2019
WebPage
Regulatory News
|
|
News
OSFI Revises Covered Bond Limit Calculation for Deposit TakersOSFI is updating the covered bond limit calculation, which was last revised in December 2014.
May 23, 2019
WebPage
Regulatory News
|
|
News
APRA Releases Minor Changes to Reporting Standards on SA-CCR for BanksAPRA released minor changes to the three reporting standards for the standardized approach for measuring counterparty credit risk exposures (SA-CCR).
May 22, 2019
WebPage
Regulatory News
|
|
News
APRA on Industry Self-Assessments into Governance and AccountabilityAPRA released an information paper analyzing the self-assessments performed by 36 of the country’s largest banks, insurers, and superannuation licensees in response to the final report on the Prudential Inquiry into the Commonwealth Bank of Australia (CBA).
May 22, 2019
WebPage
Regulatory News
|
|
News
PRA Consults on Maintenance of TMTP Under Solvency IIPRA published a consultation paper (CP11/19) that sets out its approach to update supervisory statement (SS6/16) on maintenance of the transitional measure on technical provisions (TMTP) under Solvency II.
May 22, 2019
WebPage
Regulatory News
|
|
News
EBA Regards Regulatory Framework in Argentina to be Equivalent to EUEBA published its opinion that the supervisory and regulatory framework applicable to credit institutions in Argentina can be regarded as equivalent to that applied in EU.
May 22, 2019
WebPage
Regulatory News
|
|
News
RBNZ Reviews Restrictions on Policy for Loan to Value RatioRBNZ published a report on the review of the loan to ratio (LVR) restrictions as part of a wider review of the macro-prudential policy.
May 22, 2019
WebPage
Regulatory News
|
|
News
APRA Proposes to Amend Guidance on Residential Mortgage LendingAPRA is consulting on revisions to the prudential practice guide APG 223 on residential mortgage lending in Australia.
May 21, 2019
WebPage
Regulatory News
|
