European Central Bank Launches Cyber Simulator for Financial Sector
The ECB’s initiative aims to create a single framework for testing the cyber-resilience of financial companies in the European Union
Ami Rojkes Dombe
| 03/05/2018
European Central Bank - https://www.flickr.com/photos/europeancentralbank/38271883925/in/album-72157663795933998/
The European Central Bank has designed a new test simulating cyberattacks on banks, stock exchanges, and other firms that are critical for the functioning of the financial system, it said on Wednesday.
According to Reuters, the ECB’s initiative aims to create a single framework for testing the cyber-resilience of financial firms in the European Union.
The framework envisages, among other tools, "red teams" (RTs) of external hackers hired to find and exploit vulnerabilities in the companies being tested, a technique derived from the military world and widely used in the private sector. "The test objectives ... are the flags that the RT provider must attempt to capture during the test as it progresses through the scenarios," the ECB said.
However, its European Framework for Threat Intelligence-based Ethical Red Teaming, or TIBER-EU, will only serve as a guideline and it will be for other authorities to carry out any test. "It is up to the relevant authorities and the entities themselves to determine if and when TIBER-EU based tests are performed," the ECB said.
"Tests will be tailor-made and will not result in a pass or fail – rather they will provide the tested entity with insight into its strengths and weaknesses, and enable it to learn and evolve to a higher level of cyber maturity," it added.
The ECB’s initiative aims to create a single framework for testing the cyber-resilience of financial companies in the European Union
European Central Bank - https://www.flickr.com/photos/europeancentralbank/38271883925/in/album-72157663795933998/
The European Central Bank has designed a new test simulating cyberattacks on banks, stock exchanges, and other firms that are critical for the functioning of the financial system, it said on Wednesday.
According to Reuters, the ECB’s initiative aims to create a single framework for testing the cyber-resilience of financial firms in the European Union.
The framework envisages, among other tools, "red teams" (RTs) of external hackers hired to find and exploit vulnerabilities in the companies being tested, a technique derived from the military world and widely used in the private sector. "The test objectives ... are the flags that the RT provider must attempt to capture during the test as it progresses through the scenarios," the ECB said.
However, its European Framework for Threat Intelligence-based Ethical Red Teaming, or TIBER-EU, will only serve as a guideline and it will be for other authorities to carry out any test. "It is up to the relevant authorities and the entities themselves to determine if and when TIBER-EU based tests are performed," the ECB said.
"Tests will be tailor-made and will not result in a pass or fail – rather they will provide the tested entity with insight into its strengths and weaknesses, and enable it to learn and evolve to a higher level of cyber maturity," it added.
