Featured Product

    Danish Central Bank to Continue Cyber Testing With TIBER-DK Program

    May 06, 2021

    The central bank of Denmark (Danmarks Nationalbank) is working to increase operational resilience in the financial sector, including resilience to cyber-attacks. In that context, the central bank and the individual participants in the Threat Intelligence-based Ethical Red Teaming (TIBER-DK) program have decided to continue testing with ethical hackers in future. The decision is based on the good experiences with the tests, the purpose of which has been to strengthen cyber resilience and thus promote financial stability. TIBER-DK is based on the TIBER-EU framework developed by ECB and , in this program, critical systemic entities perform threat-based red team tests.

    The Central Bank of Denmark and the financial sector have together established the TIBER-DK program. Since January 2019, threat-based red team tests have been conducted in close collaboration with the systemically most important banks and the critical parts of the Danish financial infrastructure, including the Central Bank of Denmark. In a TIBER test, ethical hackers simulate cyber attacks from, for example, organized criminal hacker groups to test cyber resilience and the response to cyber attacks. The test provides learning about how the individual organizations and groups can better defend themselves against their attacks. In April, TIBER-DK experiences were shared with senior management representatives from the TIBER-DK participants.

    A TIBER-DK test includes a number of teams in addition to TIBER Cyber Team of the Central Bank of Denmark. The White Team consists of the persons in the tested organization who know about the test and coordinate it. The White Team procures threat intelligence, which examines the threat landscape for the organization in question. The White Team also procures a Red Team, which conducts the actual Red Team attack and consists of the "ethical hackers." There are special requirements in the framework for the experience and competencies of these suppliers to ensure that they are skilled enough to be able to imitate advanced cyber groups—without harming the critical systems. The Blue Team consists of the persons in the organization in question who are attacked and defend themselves. They have no advance knowledge of the test and act as if it were a real attack.

     

    Keywords: Europe, Denmark, Banking, TIBER-EU, TIBER DK, Cyber Resilience, Cyber Risk, Operational Resilience, Central Bank of Ireland

    Related Articles
    News

    ECB Finds Banks Unprepared for Pillar 3 Climate Risk Disclosures

    The European Central Bank (ECB) published results of the 2022 supervisory assessment of climate-related and environmental risk disclosures among significant institutions (103) and a selected number of less significant institutions (28).

    April 21, 2023 WebPage Regulatory News
    News

    NCUA Assesses Credit Union Exposure to Climate-Related Physical Risks

    The National Credit Union Administration (NCUA) released a Research Note that examines the exposure of credit unions to climate-related physical risks. In a related development

    April 21, 2023 WebPage Regulatory News
    News

    EBA Issues Multiple Regulatory and Reporting Updates for Banks

    The European Banking Authority (EBA) is seeking comments, until July 31, 2023, on the draft Guidelines on the proposed common approach to the resubmission of historical data under the EBA reporting framework.

    April 21, 2023 WebPage Regulatory News
    News

    EC Adopts Regulation on Own Funds, Issues Other Updates

    The European Commission adopted Delegated Regulations on own funds and eligible liabilities, on requirements for the internal methodology under the internal default risk model

    April 20, 2023 WebPage Regulatory News
    News

    CDP Platform to Report Plastic-Related Impact, Issues Other Updates

    The Carbon Disclosure Project (CDP) announced that its global environmental disclosure platform has enabled reporting on plastic-related impact for nearly 7,000 companies worldwide

    April 19, 2023 WebPage Regulatory News
    News

    IASB to Enhance Reporting of Climate Risks, Proposes IFRS 9 Amendments

    The International Accounting Standards Board (IASB) updated its work plan to enhance the reporting of climate-related risks in the financial statements,

    April 19, 2023 WebPage Regulatory News
    News

    BIS Addresses Data Gaps and Macro-Prudential Policy for Climate Risks

    The Financial Stability Institute (FSI) of the Bank for International Settlements (BIS) published a brief paper that examines challenges associated with the use of macro-prudential policies to address climate-related financial risks.

    April 17, 2023 WebPage Regulatory News
    News

    FCA Sets Out Business Plan, Launches TechSprint on Greenwashing

    The Financial Conduct Authority (FCA) published its business plan for 2023-24. The plan sets out details of the work planned for the next 12 months to achieve better outcomes for consumers and markets

    April 17, 2023 WebPage Regulatory News
    News

    UK Committee Sets Out Recommendations for Next Phase of Open Banking

    The Joint Regulatory Oversight Committee (JROC), comprising the Financial Conduct Authority (FCA) and the Payment Systems Regulator (PSR) as co-chairs and the HM Treasury and the Competition and Markets Authority (CMA) as members

    April 17, 2023 WebPage Regulatory News
    News

    ECB Publishes Multiple Regulatory Updates for Banking Institutions

    The European Central Bank (ECB) published the results of the 2022 climate risk stress test of the Eurosystem balance sheet,

    April 17, 2023 WebPage Regulatory News
    RESULTS 1 - 10 OF 8873