Cybersecurity for the Insurance Sector

Determina ACN 38565/2025

Soggetti essenziali e importanti registrati presso ACN. Authority: ACN - Agenzia per la Cybersicurezza Nazionale.

Instruction ACPR 2014-I-07

Etablissements de credit et d'assurance sous supervision ACPR. Authority: ACPR (Autorite de Controle Prudentiel et de Resolution).

EU Regulation 2024/1689

Regulation of artificial intelligence systems in the EU with a risk-based approach. Phased application: prohibited practices from Feb 2, 2025, GPAI obligations from Aug 2, 2025, high-risk systems from Aug 2, 2026

LB Nutarimas Nr. 03-18 (2020)

Kredito istaigas, draudimo imones, mokejimo istaigas. Authority: Lietuvos bankas (Bank of Lithuania).

BAIT

Banks and financial service providers. Authority: BaFin.

BWG

Banks, credit institutions. Authority: FMA / OeNB.

Circulaire CAA 20/10

Entreprises d'assurance et de reassurance. Authority: CAA (Commissariat aux Assurances).

CBICROSS

Financial services firms regulated by CBI. Authority: CBI.

CBIOPRES

Banks, insurance companies, investment firms. Authority: CBI.

CSIRTKNF

Financial sector entities. Authority: KNF.

CSSFCIRC

Financial sector entities. Authority: CSSF.

BEK nr. 1580 af 17/12/2019

Pengeinstitutter, forsikringsselskaber og vaerdipapirhandlere. Authority: Finanstilsynet.

DNB Guidance 2019

Financiele instellingen onder toezicht van DNB. Authority: De Nederlandsche Bank (DNB).

EU Regulation 2022/2554

Digital operational resilience for the financial sector

Finantsinspektsiooni soovituslik juhend (2020)

Krediidiasutused, kindlustusseltsid, investeerimisettevotted. Authority: Finantsinspektsioon (EFSA).

EU Regulation 910/2014 + EU Regulation 2024/1183 (eIDAS 2.0)

Digital identity and qualified trust services (digital signature, certified email, time stamp)

FKTK normativie noteikumi 233 (2020)

Kreditiestades, apdrosinasanas sabiedribas, ieguldijumu uznemumi. Authority: FKTK (Finansu un kapitala tirgus komisija) / Latvijas Banka.

FFFS20145

Banks, securities companies, credit market companies. Authority: Finansinspektionen.

FINFSASTANDARDS

Banks, insurance companies, pension funds, investment firms. Authority: Finanssivalvonta.

FMA-IT-SichV 2021

Kreditinstitute, Versicherungsunternehmen, Wertpapierfirmen. Authority: FMA (Finanzmarktaufsicht).

EU Regulation 2016/679

Personal data protection in the European Union

IKT_FORSKRIFT

Banks, insurance, pension, securities firms. Authority: Finanstilsynet.

ISO/IEC 27001:2022 - International standard

Information Security Management System (ISMS)

IVASS38

National cybersecurity and compliance obligations for organizations within the scope of this regulation.

KNFREKOM

Banks, credit institutions. Authority: KNF.

D.Lgs. 138/2024

Soggetti essenziali e importanti nei 18 settori NIS2 (50+ dipendenti o 10M+ fatturato). Authority: ACN - Agenzia per la Cybersicurezza Nazionale.

MFSA Banking Rule BR/22

Credit institutions, insurance undertakings, investment services licensees. Authority: MFSA (Malta Financial Services Authority).

MNB Ajnlas 8/2020

Hitelintezetek, biztositok, penzugyi valalatok. Authority: Magyar Nemzeti Bank (MNB).

Circulaire NBB_2015_32

Etablissements de credit, entreprises d'assurance, institutions de paiement. Authority: Banque Nationale de Belgique (NBB/BNB).

Opatrenie NBS c. 3/2018

Banky, poistovne, investicne spolocnosti. Authority: Narodna banka Slovenska (NBS).

EU Directive 2022/2555 - Legislative Decree 138/2024

Network and information security for essential and important entities

PCI-DSS v4.0 (effective March 31, 2024)

Security standard for entities that handle, process, or transmit payment card data

VAIT

Insurance companies. Authority: BaFin.