Stock markets have retreated again over worries of further US interest rate rises after the Federal Reserve defied Donald Trump to increase rates for the fourth time this year.

The EU has confirmed it is “actively investigating” a potential breach of its diplomatic communications network, following reports that secret cables had been stolen by hackers.

The Bank of England has welcomed a “crucial and positive” move by the EU to help keep a key part of the financial system functioning in the event of a “no-deal” Brexit.

A handful of banks will be forced to write multimillion pound cheques to buy shares in the construction giant Kier Group after some of its biggest investors snubbed the chance to take part in a £250m fundraising.

GlaxoSmithKline (GSK) is to merge its consumer healthcare unit with that of rival Pfizer, to create a new market leader with almost £10bn in annual sales.

 

Santander has been fined more than £30m for “serious failings” in processing the accounts of dead customers, the Financial Conduct Authority (FCA) says.

FINANCE TECHNOLOGY

Cybersecurity in Finance: Getting the policy mix right!

In the midst of several large cyberattacks in 2017, the European Commission adopted its multi-sector cybersecurity package in September of that same year. Whereas this initiative can be expected to contribute to strengthening the cyber-resilience and response of EU financial firms, several policy issues and unanswered questions remain. In order to analyse the issues that are considered to be relevant to financial fields (retail banking, corporate banking, capital markets, financial infrastructure and insurance), CEPS-ECRI organised a Task Force between September 2017 and May 2018 with a group of experts from the financial industry, tech industry, national supervisors and European institutions, as well from a consumer association and a law firm. 

In this Final Report, the Task Force members identify the following nine policy issues that need to be further addressed in order to bolster the financial industry’s cyber-resilience against current and future threats.

Main policy recommendations

  1. Convergence in the taxonomies of cyber-incidents is needed.
  2. The framework for incident reporting needs to be significantly improved to fully contribute to the cyber-resilience of financial firms.
  3. Authorities should assess how and to what extent the data held by the centralised hub should be shared with supervisors, firms and clients.
  4. Ambitious policies are needed to develop consistent, reliable and exploitable statistics on cyber-trends.
  5. Best practices for cyber-hygiene should be continuously enhanced by regulators and supervisors.
  6. The European Cybersecurity Certification Scheme needs to be strengthened to contribute better to cybersecurity, cyber-risk management and capability.
  7. In order to improve the processes of attribution and extradition, the reinforcement of cross-border cooperation and legal convergence remains a priority, both within the EU and more widely.
  8. Best practices in remedies in case of cyberattacks need to be further encouraged.
  9. Policy-makers should further assess the pros, cons and feasibility of creating an emergency fund in case of large cyberattacks.

Richard Parlour

Leave a Comment