ECB published guidance on the roles and responsibilities of the White Team in a Threat Intelligence-Based Ethical Red Teaming (TIBER-EU) test. The guidance covers the roles and responsibilities of the White Team during the preparation, testing, and closure phases of a TIBER-EU test; the composition of the White Team; the requisite skills and experience of the White Team; and the organizational aspects of the White Team.
The TIBER-EU White Team Guidance is an integral part of the TIBER-EU Framework. The TIBER-EU framework enables European and national authorities to work with financial infrastructures and institutions to put in place a program to test and improve their resilience against sophisticated cyber attacks. TIBER-EU is an instrument for red team testing, designed for use by core financial infrastructures, whether at national or at European level, which can also be used by any type or size of entity across the financial and other sectors. TIBER-EU is designed to be adopted by the relevant authorities in any jurisdiction, on a voluntary basis and from a variety of perspectives, as a supervisory or oversight tool, for financial stability purposes, or as a catalyst. So far, ECB has published guidance on implementing the TIBER-EU Framework and Guidelines for the TIBER-EU Services Procurement Guidelines.
The White Team is the team—within the entity being tested—that is responsible for the overall planning and management of the test, in accordance with the TIBER-EU Framework. The members of the White Team are the only people within the entity being tested that know that a TIBER-EU test is taking place. The White Team must ensure that the TIBER-EU test is conducted in a controlled manner, with appropriate risk management controls in place, while maximizing the learning experience for the entity. For this, the White Team must closely cooperate with the TIBER Cyber Team (TCT) from the respective authority.
Related Link: TIBER-EU White Team Guidance (PDF)
Keywords: Europe, EU, Banking, Securities, PMI, Cyber Risk, Cyber Resilience, TIBER-EU, White Team, ECB
EBA published phase 2 of the technical package on the reporting framework 2.10, providing the technical tools and specifications for implementation of EBA reporting requirements.
FASB issued a proposed Accounting Standards Update that would grant insurance companies, adversely affected by the COVID-19 pandemic, an additional year to implement the Accounting Standards Update No. 2018-12 on targeted improvements to accounting for long-duration insurance contracts, or LDTI (Topic 944).
APRA updated the regulatory approach for loans subject to repayment deferrals amid the COVID-19 crisis.
BCBS and FSB published a report on supervisory issues associated with benchmark transition.
IAIS published a report on supervisory issues associated with benchmark transition from an insurance perspective.
ESMA updated the reporting manual on the European Single Electronic Format (ESEF).
EBA published a statement on resolution planning in light of the COVID-19 pandemic.
BCBS Finalizes Revisions to Credit Valuation Adjustment Risk Framework
ECB published a guideline (2020/97), in the Official Journal of European Union, on the definition of materiality threshold for credit obligations past due for less significant institutions.
FED temporarily revised the capital assessments and stress testing reports (FR Y-14A/Q/M) to implement the changes in response to the COVID-19 pandemic.