Featured Product

    EC Statement on Cybersecurity Act and Certification Rules in EU

    June 26, 2019

    The European Cybersecurity Act is entering into force on June 27, 2019, thus setting the new mandate of ENISA, which is the EU Agency for Cybersecurity, and establishing the European cybersecurity certification framework. The European cybersecurity certification framework, the first of its kind, establishes the governance and rules for EU-wide certification of information communications technology (ICT) products, processes, and services.

    The EU Cybersecurity Act gives ENISA, the EU Agency for Cybersecurity, more tasks and resources to assist EU member states in dealing with cyber-attacks. ENISA will improve the cybersecurity preparedness and resilience in EU, contributing to better information-sharing between EU member states through the network of Computer Security Incident Response Teams (CSIRTs) and by organizing regular pan-European cybersecurity exercises. 

    Additionally, the Cybersecurity Act introduces for the first time EU-wide rules for cybersecurity certification. Companies in EU will benefit from having to certify their products, processes, and services only once and see their certificates recognized across EU. Under the framework, multiple schemes will be created for different categories of ICT products, processes, and services. Each scheme will specify, among  others, the type or categories of ICT products, services and processes covered, the purpose, the security standards that shall be met, and the evaluation methods.  The schemes will also indicate the period of validity for the certificates issued. ENISA, on request from EC or the European Cybersecurity Certification Group (composed by member states), will prepare the certification schemes that will then be adopted by EC through implementing acts. 

    Regarding the certification framework, EC will prepare the first requests for ENISA to develop certification schemes and set-up the governance structure with the establishment of the relevant expert groups:

    • The European Cybersecurity Certification Group, comprising representatives from member states that will have to appoint the representatives from their competent authorities 
    • The Stakeholder Cybersecurity Certification Group, which will be responsible to advise ENISA and EC

     

    Related Links

    Keywords: Europe, EU, Banking, Insurance, Securities, Cybersecurity Act, ENISA, Cyber Risk, Cybersecurity Certification, Cyber Resilience, EC

    Related Articles
    News

    APRA Consults to Standardize Submission Date for Quarterly Reporting

    APRA proposed to standardize quarterly reporting due dates for authorized deposit-taking institutions. The proposed standardized due date is 35 calendar days after the last day of the reference quarter, which will create a 14-calendar-day extension for credit unions and building societies.

    November 08, 2019 WebPage Regulatory News
    News

    EBA Single Rulebook Q&A: First Update for November 2019

    EBA updated the Single Rulebook question and answer (Q&A) tool with answers to two questions. The answers provide clarifications on topics related to own funds and strong customer authentication under the revised Payment Services Directive or PSD2.

    November 08, 2019 WebPage Regulatory News
    News

    FED Proposes to Extend Initial Compliance Dates Under SCCL Rule

    FED published a proposal to extend, by 18 months, the initial compliance dates for foreign banks subject to the single-counterparty credit limit (SCCL) rule.

    November 08, 2019 WebPage Regulatory News
    News

    EBA Publishes Technical Package on Reporting Framework 2.9.1

    EBA published a new release of the reporting framework 2.9.1. This release includes validation rules, Data Point Model (DPM) data dictionary, XBRL taxonomy, and other supporting documents. Additionally, the release fixes some modeling issues on COREP Liquidity and FINREP.

    November 08, 2019 WebPage Regulatory News
    News

    EBA Publishes Methodology and Draft Templates for Stress Tests in 2020

    EBA published a package for the 2020 EU-wide stress test exercise for banks.

    November 07, 2019 WebPage Regulatory News
    News

    EC Publishes Results of Fitness Check of Reporting Requirements in EU

    EC published results of the fitness check of supervisory reporting requirements in financial services legislation in EU.

    November 07, 2019 WebPage Regulatory News
    News

    BCBS Assesses NSFR and LE Rules in Argentina and China as Compliant

    BCBS published reports that assess the implementation of net stable funding ratio (NSFR) and large exposures, or LE, framework in Argentina and China.

    November 07, 2019 WebPage Regulatory News
    News

    FSB Publishes Summary of Plenary Meeting in Paris

    At the meeting, the Plenary reviewed vulnerabilities in the global financial system, fintech developments (including developments in the crypto-asset markets), ongoing work of FSB, and the work program for 2020.

    November 07, 2019 WebPage Regulatory News
    News

    HKMA Highlights Technology Initiatives at the Hong Kong FinTech Week

    HKMA co-organized, with InvestHK, the Hong Kong FinTech Week 2019, which was a five-day flagship fintech event that attracted thousands of attendees worldwide.

    November 06, 2019 WebPage Regulatory News
    News

    ECB Report on Fallback Provisions in Contracts Referencing EURIBOR

    ECB published a report, by private sector working group on euro risk-free rates, presenting recommendations for fallback provisions in contracts for cash products and derivative transactions referencing EURIBOR.

    November 06, 2019 WebPage Regulatory News
    RESULTS 1 - 10 OF 4118