EC Statement on Cybersecurity Act and Certification Rules in EU
The European Cybersecurity Act is entering into force on June 27, 2019, thus setting the new mandate of ENISA, which is the EU Agency for Cybersecurity, and establishing the European cybersecurity certification framework. The European cybersecurity certification framework, the first of its kind, establishes the governance and rules for EU-wide certification of information communications technology (ICT) products, processes, and services.
The EU Cybersecurity Act gives ENISA, the EU Agency for Cybersecurity, more tasks and resources to assist EU member states in dealing with cyber-attacks. ENISA will improve the cybersecurity preparedness and resilience in EU, contributing to better information-sharing between EU member states through the network of Computer Security Incident Response Teams (CSIRTs) and by organizing regular pan-European cybersecurity exercises.
Additionally, the Cybersecurity Act introduces for the first time EU-wide rules for cybersecurity certification. Companies in EU will benefit from having to certify their products, processes, and services only once and see their certificates recognized across EU. Under the framework, multiple schemes will be created for different categories of ICT products, processes, and services. Each scheme will specify, among others, the type or categories of ICT products, services and processes covered, the purpose, the security standards that shall be met, and the evaluation methods. The schemes will also indicate the period of validity for the certificates issued. ENISA, on request from EC or the European Cybersecurity Certification Group (composed by member states), will prepare the certification schemes that will then be adopted by EC through implementing acts.
Regarding the certification framework, EC will prepare the first requests for ENISA to develop certification schemes and set-up the governance structure with the establishment of the relevant expert groups:
- The European Cybersecurity Certification Group, comprising representatives from member states that will have to appoint the representatives from their competent authorities
- The Stakeholder Cybersecurity Certification Group, which will be responsible to advise ENISA and EC
Related Links
Keywords: Europe, EU, Banking, Insurance, Securities, Cybersecurity Act, ENISA, Cyber Risk, Cybersecurity Certification, Cyber Resilience, EC
Related Articles
BoE Clarifies Approach to Treatment of Payment Holidays on Form PL
BoE published a statistical notice (Notice 2020/9) explaining the approach for treatment of payment holidays on the profit and loss return or Form PL.
BoE Provides Reporting Update on Form AS and Form FV
BoE updated the known issues document for the statistical reporting Forms AS and FV.
BIS Publishes Update on G20 TechSprint Initiative
BIS published an update on the G20 TechSprint Initiative, which was launched in April 2020 and aims to highlight the potential for technologies to resolve regulatory compliance (regtech) and supervisory (suptech) challenges.
FED Announces Capital Requirements for Large Banks
FED announced individual capital requirements for 34 large banks and these requirements go into effect on October 01, 2020.
SRB Publishes Guidance on Implementation of Bail-In Tool
SRB published a set of documents to give operational guidance to banks on implementation of the bail-in tool.
OSFI Provides Update on Implementation of IFRS 17 in Canada
OSFI published a letter that provides an update on the milestones for the implementation of the IFRS 17 standard on insurance contracts.
EBA Provides Clarity on Implementation of Guidance on COVID Reporting
EBA updated the report on the implementation of selected COVID-19 policies.
FSI Note Discusses Challenges Associated with COVID Relief Measures
The Financial Stability Institute (FSI) of BIS published a brief note that examines the supervisory challenges associated with certain temporary regulatory relief measures introduced by BCBS and prudential authorities in response to the COVID-19 pandemic.
BCBS Consults on Principles for Operational Risk and Resilience
BCBS is consulting on the principles for operational resilience and the revisions to the principles for sound management of operational risk for banks.
BoE Updates Template and Definitions for Form ER
BoE updated the reporting template for Form ER as well as the Form ER definitions, which contain guidance on the methodology to be used in calculating annualized interest rates.
