ECB published guidance on the roles and responsibilities of the White Team in a Threat Intelligence-Based Ethical Red Teaming (TIBER-EU) test. The guidance covers the roles and responsibilities of the White Team during the preparation, testing, and closure phases of a TIBER-EU test; the composition of the White Team; the requisite skills and experience of the White Team; and the organizational aspects of the White Team.
The TIBER-EU White Team Guidance is an integral part of the TIBER-EU Framework. The TIBER-EU framework enables European and national authorities to work with financial infrastructures and institutions to put in place a program to test and improve their resilience against sophisticated cyber attacks. TIBER-EU is an instrument for red team testing, designed for use by core financial infrastructures, whether at national or at European level, which can also be used by any type or size of entity across the financial and other sectors. TIBER-EU is designed to be adopted by the relevant authorities in any jurisdiction, on a voluntary basis and from a variety of perspectives, as a supervisory or oversight tool, for financial stability purposes, or as a catalyst. So far, ECB has published guidance on implementing the TIBER-EU Framework and Guidelines for the TIBER-EU Services Procurement Guidelines.
The White Team is the team—within the entity being tested—that is responsible for the overall planning and management of the test, in accordance with the TIBER-EU Framework. The members of the White Team are the only people within the entity being tested that know that a TIBER-EU test is taking place. The White Team must ensure that the TIBER-EU test is conducted in a controlled manner, with appropriate risk management controls in place, while maximizing the learning experience for the entity. For this, the White Team must closely cooperate with the TIBER Cyber Team (TCT) from the respective authority.
Related Link: TIBER-EU White Team Guidance (PDF)
Keywords: Europe, EU, Banking, Securities, PMI, Cyber Risk, Cyber Resilience, TIBER-EU, White Team, ECB
Previous ArticleESRB Dashboard Examines Systemic Risks in EU
EC published the Implementing Regulation 2021/763 that lays down implementing technical standards for supervisory reporting and public disclosure of the minimum requirement for own funds and eligible liabilities (MREL).
EBA published a report that examines the convergence of prudential supervisory practices in 2020 and offers conclusions of the EBA college monitoring activity.
APRA announced the standardization of quarterly reporting due dates for authorized deposit-taking institutions.
The private sector working group of ECB on euro risk-free rates published the recommendations to address events that would trigger fallbacks in the Euro Interbank Offered Rate (EURIBOR)-related contracts, along with the €STR-based EURIBOR fallback rates (rates that could be used if a fallback is triggered).
Bundesbank published a list of "EntryPoints" that are accepted in its reporting system; the list provides taxonomy version and name of the module against each EntryPoint.
EBA published the phase 1 of its reporting framework 3.1, with the technical package covering the new reporting requirements for investment firms (under the implementing technical standards on investment firms reporting).
The Sustainable Finance Taskforce of IOSCO held two roundtables, with global stakeholders, on the IOSCO priorities to enhance the reliability, comparability, and consistency of sustainability-related disclosures and to collect views on the practical implementation of a global system architecture for these disclosures.
Asia Pacific Australia Banking APS 111 Capital Adequacy Regulatory Capital Basel RBNZ APRA
ESMA published the final guidelines on outsourcing to cloud service providers.
EBA published annual data for two key concepts and indicators in the Deposit Guarantee Schemes (DGS) Directive—available financial means and covered deposits.