article thumbnail

Operational Resilience Self-Assessment: Achieving the March 2022 Deadline

Castellan

In March 2021, The Bank of England, the Prudential Regulation Authority (PRA), and the Financial Conduct Authority (FCA) published policy documents about operational resilience. This was explained in May by Lyndon Nelson Deputy CEO of the Prudential Regulation Authority. DOWNLOAD NOW.

article thumbnail

ISO 27001 Certification Requirements & Standards

Reciprocity

The ISO 27001 family, published by the International Organization for Standardization, includes a set of standards for information security. Perform a Gap Analysis. What is ISO 27001? Second, you must conduct an information-gathering exercise to assess senior-level objectives and establish information security goals.

Audit 52
Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

The Digital Operational Resilience Act is Finalized – Now is the Time to Act

Fusion Risk Management

As such , there is an increased focus on financial institutions protecting their critical business services against disruption, so it is a logical next step for the supervisory authorities to place the burden on operational resilience on key third parties that support the financial system. . Defining a Critical ICT. Enforcement of the DORA.

article thumbnail

The SEPA Cyber Attack a Case Study

Plan B Consulting

Over the last four weeks, I have been publishing a running commentary on their response here. Attacks on English local authorities, such as Hackney, I believe have not been paid, but the consequence of this is that three months later they still do not have all their systems back online. They have also said that they lost 1.2

article thumbnail

The SEPA Cyber Attack a Case Study

Plan B Consulting

Over the last four weeks, I have been publishing a running commentary on their response here. Attacks on English local authorities, such as Hackney, I believe have not been paid, but the consequence of this is that three months later they still do not have all their systems back online. They have also said that they lost 1.2