Kibernetska varnost za sektor Finance in naložbe

BaFin IT Requirements for Capital Management Companies

Sankcije: Regulatory measures by BaFin including license revocation

KAIT (BaFin Rundschreiben 11/2019)

Kapitalverwaltungsgesellschaften (KVG). Authority: BaFin.

Organ: BaFin

Rok: 1. oktober 2019

Banco de Portugal Notice 1/2021 - ICT Risk Management

Sankcije: Regulatory sanctions by Banco de Portugal

Aviso BdP n. 1/2021

Instituicoes de credito e empresas de investimento. Authority: Banco de Portugal.

Organ: Banco de Portugal

Rok: 1. januar 2021

Bank of Greece IT Risk Management Framework

Sankcije: Regulatory sanctions by Bank of Greece

BoG Governor Act 2577/2006 (as amended)

Pistotika idrymata kai epicheiriseis ependyseon. Authority: Trapeza tis Ellados (Bank of Greece).

Organ: Trapeza tis Ellados (Bank of Greece)

Rok: 9. marec 2006

Bank of Lithuania Resolution on ICT Management Requirements

Sankcije: Regulatory sanctions by Bank of Lithuania

LB Nutarimas Nr. 03-18 (2020)

Kredito istaigas, draudimo imones, mokejimo istaigas. Authority: Lietuvos bankas (Bank of Lithuania).

Organ: Lietuvos bankas (Bank of Lithuania)

Rok: 1. junij 2020

Bank of Spain Circular 2/2023 on Technology Risk Supervision

Sankcije: Regulatory sanctions by Banco de Espana

Circular 2/2023 BdE

Entidades de credito y proveedores de servicios de pago. Authority: Banco de Espana.

Organ: Banco de Espana

Rok: 30. junij 2023

Bankaufsichtliche Anforderungen an die IT

BAIT

Banks and financial service providers. Authority: BaFin.

Organ: BaFin

Rok: 6. november 2017

Sankcije: Veljajo nacionalne sankcije

Bankitalia 285 - Disposizioni di Vigilanza Banche (Titolo IV)

2 vodnikov

BANKITALIA285

Nacionalne obveznosti na področju kibernetske varnosti in skladnosti za organizacije, ki spadajo v področje uporabe te regulative.

Organ: Banca d'Italia

Rok: 17. december 2013

Bankwesengesetz - IT security provisions

BWG

Banks, credit institutions. Authority: FMA / OeNB.

Organ: FMA / OeNB

Rok: 1. januar 1993

BNR Norm 4/2018 on IT Operational Risk Management

Sankcije: Regulatory sanctions by BNR

Norma BNR nr. 4/2018

Institutii de credit si institutii financiare. Authority: Banca Nationala a Romaniei (BNR).

Organ: Banca Nationala a Romaniei (BNR)

Rok: 1. junij 2018

CBI Cross-Industry Guidance on IT and Cybersecurity Risks

CBICROSS

Financial services firms regulated by CBI. Authority: CBI.

Organ: CBI

Rok: 1. september 2016

CBI Operational Resilience Guidelines

CBIOPRES

Banks, insurance companies, investment firms. Authority: CBI.

Organ: CBI

Rok: 1. december 2021

CSIRT KNF - Financial Sector CSIRT

CSIRTKNF

Financial sector entities. Authority: KNF.

Organ: KNF

Rok: 1. januar 2020

CSSF Circulars on IT outsourcing and cybersecurity (17/654, 22/806)

CSSFCIRC

Financial sector entities. Authority: CSSF.

Organ: CSSF

Rok: 1. junij 2017

Danish FSA IT Security Requirements for Financial Sector

Sankcije: Regulatory measures by Finanstilsynet

BEK nr. 1580 af 17/12/2019

Pengeinstitutter, forsikringsselskaber og vaerdipapirhandlere. Authority: Finanstilsynet.

Organ: Finanstilsynet

Rok: 1. januar 2020

DNB Good Practice Information Security

Sankcije: DNB regulatory measures

DNB Guidance 2019

Financiele instellingen onder toezicht van DNB. Authority: De Nederlandsche Bank (DNB).

Organ: De Nederlandsche Bank (DNB)

Rok: 1. april 2019

Sankcije: Do 10 mio. EUR ali 5% letnega prometa

DORA

3 vodnikov

Uredba EU 2022/2554

Digitalna operativna odpornost za finančni sektor

Organ: EBA, ESMA, EIOPA (ESAs) - Banka Slovenije

Rok: 17. januar 2025

EFSA Guidelines on IT Risk Management for Financial Sector

Sankcije: Regulatory sanctions by EFSA

Finantsinspektsiooni soovituslik juhend (2020)

Krediidiasutused, kindlustusseltsid, investeerimisettevotted. Authority: Finantsinspektsioon (EFSA).

Organ: Finantsinspektsioon (EFSA)

Rok: 1. januar 2020

FCMC Regulations on IT and Security Risk Management

Sankcije: Regulatory sanctions by Latvijas Banka

FKTK normativie noteikumi 233 (2020)

Kreditiestades, apdrosinasanas sabiedribas, ieguldijumu uznemumi. Authority: FKTK (Finansu un kapitala tirgus komisija) / Latvijas Banka.

Organ: FKTK (Finansu un kapitala tirgus komisija) / Latvijas Banka

Rok: 1. september 2020

FFFS 2014:5 Informationssaekerhet, it-verksamhet

FFFS20145

Banks, securities companies, credit market companies. Authority: Finansinspektionen.

Organ: Finansinspektionen

Rok: 1. maj 2014

Finanssivalvonta Standards and Regulations on IT risk management

FINFSASTANDARDS

Banks, insurance companies, pension funds, investment firms. Authority: Finanssivalvonta.

Organ: Finanssivalvonta

Rok: 1. januar 2004

FMA IT Security Regulation for Financial Sector

Sankcije: Regulatory measures by FMA

FMA-IT-SichV 2021

Kreditinstitute, Versicherungsunternehmen, Wertpapierfirmen. Authority: FMA (Finanzmarktaufsicht).

Organ: FMA (Finanzmarktaufsicht)

Rok: 1. september 2021

Sankcije: Do 20 mio. EUR ali 4% globalnega letnega prometa

GDPR

4 vodnikov

Uredba EU 2016/679

Varstvo osebnih podatkov v Evropski uniji

Organ: IP RS - Informacijski pooblaščenec

IKT-forskrift for finansforetak (IKT regulation for financial entities)

IKT_FORSKRIFT

Banks, insurance, pension, securities firms. Authority: Finanstilsynet.

Organ: Finanstilsynet

Rok: 21. maj 2003

Sankcije: Ni uporabno (prostovoljni standard)

ISO 27001

2 vodnikov

ISO/IEC 27001:2022 - Mednarodni standard

Sistem upravljanja varnosti informacij (ISMS)

Organ: Akreditirani certifikacijski organi

KNF Recommendation D - Management of IT and ICT Environment

KNFREKOM

Banks, credit institutions. Authority: KNF.

Organ: KNF

Rok: 1. januar 2013

Legislative Decree 138/2024 - NIS2 Transposition

Sankcije: Fino a 10 milioni di euro o 2% del fatturato mondiale annuo

D.Lgs. 138/2024

Soggetti essenziali e importanti nei 18 settori NIS2 (50+ dipendenti o 10M+ fatturato). Authority: ACN - Agenzia per la Cybersicurezza Nazionale.

Organ: ACN - Agenzia per la Cybersicurezza Nazionale

Rok: 16. oktober 2024

MFSA ICT Risk Management Requirements for Financial Sector

Sankcije: Regulatory sanctions by MFSA

MFSA Banking Rule BR/22

Credit institutions, insurance undertakings, investment services licensees. Authority: MFSA (Malta Financial Services Authority).

Organ: MFSA (Malta Financial Services Authority)

Rok: 1. januar 2021

MNB Recommendation on IT Security for Financial Institutions

Sankcije: Regulatory sanctions by MNB

MNB Ajnlas 8/2020

Hitelintezetek, biztositok, penzugyi valalatok. Authority: Magyar Nemzeti Bank (MNB).

Organ: Magyar Nemzeti Bank (MNB)

Rok: 1. oktober 2020

NBB Circular on ICT Security Expectations for Financial Institutions

Sankcije: Regulatory sanctions by NBB

Circulaire NBB_2015_32

Etablissements de credit, entreprises d'assurance, institutions de paiement. Authority: Banque Nationale de Belgique (NBB/BNB).

Organ: Banque Nationale de Belgique (NBB/BNB)

Rok: 18. november 2015

NBS Measure 3/2018 on IT Risk Management

Sankcije: Regulatory sanctions by NBS

Opatrenie NBS c. 3/2018

Banky, poistovne, investicne spolocnosti. Authority: Narodna banka Slovenska (NBS).

Organ: Narodna banka Slovenska (NBS)

Rok: 1. julij 2018

Sankcije: Do 10 mio. EUR ali 2% letnega prometa

NIS2

4 vodnikov

Direktiva EU 2022/2555

Varnost omrežij in informacijskih sistemov za bistvene in pomembne subjekte

Organ: SI-CERT - Nacionalni odzivni center za kibernetsko varnost

Rok: 17. oktober 2024

Ordinance on Minimum Network and Information Security Requirements

Sankcije: BGN 5,000 to BGN 25,000 for first offence

Naredba za MMIS (prieta s PMS 186/2019)

Operators of essential services and digital service providers. Authority: State Agency for Cybersecurity.

Organ: State Agency for Cybersecurity

Rok: 2. avgust 2019

Sankcije: Globe kartičnih omrežij (Visa, Mastercard) do 500.000 $/mesec + preklic

PCI-DSS

2 vodnikov

PCI-DSS v4.0 (velja od 31. marca 2024)

Varnostni standard za subjekte, ki ravnajo s podatki plačilnih kartic, jih obdelujejo ali prenašajo

Organ: PCI Security Standards Council

Sklep Banke Slovenije o upravljanju informacijske varnosti

Sankcije: Regulatory sanctions by Bank of Slovenia

Sklep BS (Ur. l. RS 73/2018)

Kreditne institucije in poddruznice tujih bank. Authority: Banka Slovenije.

Organ: Banka Slovenije

Rok: 1. december 2018