FCA to Comply with EBA Guidelines on ICT and Security Risk Management
FCA published a statement on its intention to comply with the EBA guidelines on information and communication technology (ICT) and security risk management for credit institutions, investment firms, and payment service providers. The guidelines, which were published in November 2019, enter into force on June 30, 2020. In its statement, FCA also points out that it is in the process of consulting on new requirements to strengthen operational resilience in the financial services sector. FCA expects to publish the final rules on operation resilience in the first quarter of 2021, including providing further information on the links between its operational resilience policy and the EBA guidelines.
In March 2020, FCA had extended the comment period for its consultation (CP19/32) on operational resilience until October 01, 2020. Firms and financial market infrastructures are not expected to be required to meet requirements resulting from this consultation before the end of 2021. While operational resilience remains a top priority for FCA, PRA, and BoE, the later publication date and implementation timetable are intended to alleviate burden on firms and financial market infrastructures in the wake of the COVID-19 outbreak. FCA welcomes feedback from firms to its consultation and their experiences in embedding the requirements of the EBA guidelines.
All credit institutions, investment firms, and payment service providers will be expected to make every effort to comply with the EBA guidelines. Firms should also refer to the EBA "further guidance" on the use of flexibility in relation to COVID-19 and the implementation of the guidelines on ICT and security risk management. Consistent with the EBA "further guidance," FCA will apply reasonable supervisory flexibility when assessing the implementation of the ICT and security management guidelines, given the ongoing COVID-19 crisis.
Related Links
Effective Date: June 30, 2020
Keywords: Europe, EU, UK, Banking, Securities, Insurance, FMI, COVID-19, Operational Resilience, Cyber Risk, CP 19/32, PRA, BoE, FCA
Related Articles
EBA Provides Clarity on Implementation of Certain COVID-19 Policies
EBA published a report on the implementation of selected COVID-19 policies within the prudential framework for banking sector.
BCBS Report Examines Progress on Adoption of Basel III Framework
BCBS published the eighteenth progress report on implementation of the Basel III regulatory framework in member jurisdictions.
BCBS Amends Guidelines on Sound Management of AML/CFT Risks
BCBS amended the guidelines on sound management of risks related to money laundering and financing of terrorism (ML/FT).
US Agencies Finalize Amendments to Swap Margin Rule
US Agencies (Farm Credit Administration, FDIC, FED, FHFA, and OCC) finalized changes to the swap margin rule to facilitate implementation of prudent risk management strategies at banks and other entities with significant swap activities.
PRA Letter Sets Expectations on Approach to Managing Climate Risks
PRA published a letter that builds on the expectations set out in the supervisory statement (SS3/19) on enhancing banks' and insurers' approaches to managing the financial risks from climate change.
EBA Guidelines on Treatment of Structural Foreign Exchange Under CRR
EBA finalized the guidelines on treatment of structural foreign-exchange (FX) positions under Article 352(2) of the Capital Requirements Regulation (CRR).
FSB Issues Statement on Impact of COVID-19 Crisis on Benchmark Reform
FSB published a statement on the impact of COVID-19 pandemic on global benchmark transition.
IAIS Publishes List of Internationally Active Insurance Groups
IAIS published the list of Internationally Active Insurance Groups (IAIGs) publicly disclosed by group-wide supervisors.
FED Temporarily Revises FR Y-9C With Respect to PPPLF and CARES Act
FED has temporarily revised the reporting form on consolidated financial statements for holding companies (FR Y-9C; OMB No. 7100-0128).
EC Launches Consultation on Review of Solvency II Directive
EC launched a consultation on the review of the key elements of Solvency II Directive, with the comment period ending on October 21, 2020.
