Featured Product

    FCA Issues Insights on Cyber Resilience Practices in Financial Sector

    March 08, 2019

    FCA published a report on insights on the cyber resilience practices in the financial industry. The report presents examples of the cyber security practices that firms have shared with FCA. FCA hopes that these practices and experiences will help firms when considering where to prioritize their efforts in increasing cyber resilience.

    Since 2017, FCA has brought together over 175 firms across different financial sectors to share information and ideas from their cyber experiences. FCA runs the Cyber Coordination Groups (CCGs) with industry to help improve cyber-security practices among members of the CCGs and their sectors. Over the last year, the groups have been discussing and sharing practices in the areas of Governance, Identification, Protection, Detection, Situational Awareness, Response and Recovery, and Testing. FCA has collated the examples shared by firms and set out those it considers to be beneficial for a wider audience under each of these themes:

    • Putting good governance in place
    • Identifying what needs to be protected
    • Protecting assets appropriately
    • Using good detection systems
    • Being aware of emerging threats and issues
    • Being ready to respond and recover
    • Testing and refining defenses

    The insights in this publication may be relevant for small and medium-size firms. However, FCA encourages all firms to consider whether these insights may be useful to them. FCA warns that this document should not be considered as FCA guidance, as it does not set out the FCA expectations about what systems and controls firms should have in place to comply with its regulatory requirements. However, many of the shared examples support existing guidance from the National Cyber Security Center. 

     

    Related Links

    Keywords: Europe, UK, Banking, Securities, Insurance, Cyber Resilience, Cyber Risk, Cyber Security, Regtech, FCA

    Related Articles
    News

    BIS Report Notes Existing Gaps in Climate Risk Data at Central Banks

    A Consultative Group on Risk Management (CGRM) at the Bank for International Settlements (BIS) published a report that examines incorporation of climate risks into the international reserve management framework.

    July 29, 2022 WebPage Regulatory News
    News

    EBA Publishes Multiple Regulatory Updates for Regulated Entities

    The European Banking Authority (EBA) published the final guidelines on liquidity requirements exemption for investment firms, updated version of its 5.2 filing rules document for supervisory reporting, and Single Rulebook Question and Answer (Q&A) updates in July 2022.

    July 29, 2022 WebPage Regulatory News
    News

    APRA Consults on Prudential Standard for Operational Risk

    The Australian Prudential Regulation Authority (APRA) is seeking comments, until October 21, 2022, on the introduction of CPS 230, which is the new cross-industry prudential standard on operational risk management.

    July 28, 2022 WebPage Regulatory News
    News

    EC Amends Rule on Securitizations; ESRB Updates Reciprocation Measures

    The European Commission published a Delegated Regulation 2022/1301 on the information to be provided in accordance with the simple, transparent, and standardized (STS) notification requirements for on-balance-sheet synthetic securitizations.

    July 27, 2022 WebPage Regulatory News
    News

    APRA Announces Revisions to Capital Framework for Banks

    The Australian Prudential Regulation Authority (APRA) is announced revisions to the capital framework for authorized deposit-taking institutions to implement the "unquestionably strong" capital ratios and the Basel III reforms.

    July 26, 2022 WebPage Regulatory News
    News

    EBA Examines Remuneration Data and Use of Large Exposure Exemptions

    The European Banking Authority (EBA) published a report that examines the use of certain exemptions included in the large exposures regime under the Capital Requirements Regulation (CRR).

    July 22, 2022 WebPage Regulatory News
    News

    UK Authorities Publish Discussion Paper on Critical Third Parties

    The Bank of England (BoE), the Prudential Regulation Authority (PRA), and the Financial Conduct Authority (FCA) published a joint discussion paper that sets out potential measures to oversee and strengthen the resilience of services provided by critical third parties to the financial sector in UK.

    July 22, 2022 WebPage Regulatory News
    News

    BoE Issues Update on Ongoing Data Transformation Program

    The Bank of England (BoE) issued a communication to firms to provide an update on the progress of the joint data transformation program—which is being led by BoE, the Financial Conduct Authority (FCA), and the industry—for the financial sector in UK.

    July 21, 2022 WebPage Regulatory News
    News

    EBA Issues Draft Methodology and Templates for 2023 Stress Tests

    The European Banking Authority (EBA) published the draft methodology, templates, and template guidance for the European Union-wide stress test in 2023.

    July 21, 2022 WebPage Regulatory News
    News

    EBA Issues SREP Guidelines and Standards for Investment Firms

    The European Banking Authority (EBA) and the European Securities and Markets Authority (ESMA) jointly published the final guidelines on common procedures and methodologies for the supervisory review and evaluation process (SREP) for investment firms.

    July 21, 2022 WebPage Regulatory News
    RESULTS 1 - 10 OF 8407