Featured Product

    EBA Consults on Guidelines on ICT and Security Risk Management

    December 13, 2018

    EBA launched a consultation on the draft guidelines on ICT and security risk management. These guidelines establish requirements for credit institutions, investment firms, and payment service providers (PSPs) on the mitigation and management of their information and communication technology (ICT) risks and aim to ensure a consistent and robust approach across the Single Market. The consultation runs until March 13, 2019.

    The guidelines outline expectations in relation to governance, risk assessment process, information security requirements, ICT operational management, security in the change and development processes, and business continuity management to mitigate ICT and security risks. Due to an increasing reliance on ICT for their operational functioning, financial institutions are vulnerable to increased threats from internal and external attacks, including cyber-attacks, or breaches that may arise from inadequate business continuity planning for ICT systems and processes, or poor processes related to ICT change management. These guidelines aim to mitigate all ICT risks—whether internal or external—, including security-related risks, for all financial institutions. 

    The Guidelines are addressed to credit institutions and investment firms as defined in the Capital Requirements Directive (CRD), for all of their activities, and to PSPs subject to the revised Payment Services Directive (PSD2), for their payment services. These guidelines respond to EC's FinTech Action plan request for the EBA to develop guidelines on ICT risk management and mitigation requirements in the financial sector in EU. The guidelines on security measures for operational and security risks (EBA GL/2017/17) have been fully integrated in the EBA guidelines on ICT and security risk management and will be repealed when these proposed guidelines enter into force.

     

    Related Links

    Comment Due Date: March 13, 2019

    Keywords: Europe, EU, Banking, PMI, Guidelines, Cyber Risk, ICT Risk, Regtech, CRD, PSD2, EBA

    Related Articles
    News

    EBA Proposes Guidelines for Establishing Intermediate Parent Entities

    EBA issued a consultation paper on the guidelines on monitoring of the threshold and other procedural aspects of the establishment of intermediate EU parent undertakings, or IPUs, as laid down in the Capital Requirements Directive.

    January 15, 2021 WebPage Regulatory News
    News

    EC Adopts Financial Reporting Changes Arising from Benchmark Reforms

    EC published Regulation 2021/25 that addresses amendments related to the financial reporting consequences of replacement of the existing interest rate benchmarks with alternative reference rates.

    January 14, 2021 WebPage Regulatory News
    News

    BIS Bulletin Examines Key Elements of Policy Response to Cyber Risk

    BIS published a bulletin, or a note, that examines the cyber threat landscape in the context of the pandemic and discusses policies to reduce risks to financial stability.

    January 14, 2021 WebPage Regulatory News
    News

    HMT Updates List of Post-Brexit Equivalence Decisions in UK

    HM Treasury, also known as HMT, has updated the table containing the list of the equivalence decisions that came into effect in UK at the end of the transition period of its withdrawal from EU.

    January 14, 2021 WebPage Regulatory News
    News

    EBA Issues Erratum for Technical Package on Reporting Framework 3.0

    EBA published an erratum for technical package on phase 1 of the reporting framework 3.0.

    January 14, 2021 WebPage Regulatory News
    News

    APRA Publishes FAQ on Measurement of Credit Risk Weighted Assets

    APRA updated a frequently asked question (FAQ), for authorized deposit-taking institutions, on the measurement of credit risk weighted assets.

    January 14, 2021 WebPage Regulatory News
    News

    EBA Publishes Risk Dashboard for Third Quarter of 2020

    EBA published the quarterly risk dashboard, along with the results of the Risk Assessment Questionnaire survey among 60 banks and 15 market analysts.

    January 13, 2021 WebPage Regulatory News
    News

    ECB Analysis Shows Privacy as Biggest Concern in Use of Digital Euro

    ECB concluded the public consultation on the introduction of a digital euro in EU.

    January 13, 2021 WebPage Regulatory News
    News

    ECB Analysis Shows Privacy as Biggest Concern in Use of Digital Euro

    ECB concluded the public consultation on the introduction of a digital euro in EU.

    January 13, 2021 WebPage Regulatory News
    News

    ECB Finalizes Guide on Supervisory Approach to Bank Consolidation

    ECB published a guide that sets out the supervisory approach to consolidation in the banking sector.

    January 12, 2021 WebPage Regulatory News
    RESULTS 1 - 10 OF 6432