Featured Product

    EIOPA Finalizes Guidelines on ICT Security and Governance

    October 12, 2020

    EIOPA finalized the guidelines on information and communication technology (ICT) security and governance for the insurance sector. The guidelines address how rules on operational risks set forth in the Solvency II Directive and in the Delegated Regulation 2015/35 are applied to the ICT security and governance. EIOPA consulted on the draft guidelines between December 2019 and March 2020 and has also published its response to the key issues raised in the feedback. The guidelines are intended for both market participants and the national supervisory authorities, which are expected to apply these guidelines from July 01, 2021.

    The objective of the guidelines is to promote the increase of the operational resilience of the digital operations of insurance and reinsurance undertakings against the risks they face. Operational resilience is key to protecting the digital assets (including their systems and data) of insurance and reinsurance undertakings. The guidelines provide clarification and transparency to market participants on the minimum expected information and cyber-security capabilities and help to avoid potential regulatory arbitrage. These guidelines are also intended to foster supervisory convergence regarding the expectations and processes applicable in relation to ICT security and governance as a key to proper ICT and security risk management.

    Competent authorities should, when complying or supervising compliance with these guidelines, take into account the principle of proportionality. This principle should should ensure that governance arrangements, including those related to ICT security and governance are proportionate to the nature, scale, and complexity of the corresponding risks undertakings face or may face. The guidelines should be read in conjunction with the Solvency II Directive, the Delegated Regulation 2015/35, the EIOPA guidelines on system of governance, and the EIOPA guidelines on outsourcing to cloud service providers. 


    Related Links

    Effective Date: July 01, 2021 (expected)

    Keywords: Europe, EU, Insurance, Governance, Operational Risk, Solvency II, Cloud Service Providers, ICT Risk, EIOPA

    Featured Experts
    Related Articles
    News

    EC Regulation Sets Out Standards for Reporting and Disclosure of MREL

    EC published the Implementing Regulation 2021/763 that lays down implementing technical standards for supervisory reporting and public disclosure of the minimum requirement for own funds and eligible liabilities (MREL).

    May 12, 2021 WebPage Regulatory News
    News

    EBA Report Notes Loan Origination Should Remain in Supervisory Focus

    EBA published a report that examines the convergence of prudential supervisory practices in 2020 and offers conclusions of the EBA college monitoring activity.

    May 12, 2021 WebPage Regulatory News
    News

    APRA Decides to Standardize Submission Date for Quarterly Reporting

    APRA announced the standardization of quarterly reporting due dates for authorized deposit-taking institutions.

    May 11, 2021 WebPage Regulatory News
    News

    ECB Working Group Publishes Recommendations on EURIBOR Fallbacks

    The private sector working group of ECB on euro risk-free rates published the recommendations to address events that would trigger fallbacks in the Euro Interbank Offered Rate (EURIBOR)-related contracts, along with the €STR-based EURIBOR fallback rates (rates that could be used if a fallback is triggered).

    May 11, 2021 WebPage Regulatory News
    News

    Bundesbank Publishes Supporting Documentation for Reporting by Banks

    Bundesbank published a list of "EntryPoints" that are accepted in its reporting system; the list provides taxonomy version and name of the module against each EntryPoint.

    May 11, 2021 WebPage Regulatory News
    News

    EBA Publishes Phase 1 of Reporting Framework 3.1

    EBA published the phase 1 of its reporting framework 3.1, with the technical package covering the new reporting requirements for investment firms (under the implementing technical standards on investment firms reporting).

    May 10, 2021 WebPage Regulatory News
    News

    IOSCO Sees Support for Mandatory Sustainability Reporting

    The Sustainable Finance Taskforce of IOSCO held two roundtables, with global stakeholders, on the IOSCO priorities to enhance the reliability, comparability, and consistency of sustainability-related disclosures and to collect views on the practical implementation of a global system architecture for these disclosures.

    May 10, 2021 WebPage Regulatory News
    News

    APRA to Finalize Capital Adequacy Standard Revisions by January 2022

    Asia Pacific Australia Banking APS 111 Capital Adequacy Regulatory Capital Basel RBNZ APRA

    May 10, 2021 WebPage Regulatory News
    News

    ESMA Issues Guidelines on Outsourcing to Cloud Service Providers

    ESMA published the final guidelines on outsourcing to cloud service providers.

    May 10, 2021 WebPage Regulatory News
    News

    EBA Publishes Data on Deposit Guarantee Schemes

    EBA published annual data for two key concepts and indicators in the Deposit Guarantee Schemes (DGS) Directive—available financial means and covered deposits.

    May 10, 2021 WebPage Regulatory News
    RESULTS 1 - 10 OF 6967