21 July 2017
visit www.finastra.com

BofE unveils cyber-security framework

10 June 2014  |  7968 views  |  0 Bank of england

The Bank of England has set out a new framework designed to test for cyber vulnerabilities at financial institutions.

Several UK banks have been hit by cyber-attacks over the last year, pushing the issue up the agenda both for institutions and regulators, with the BofE telling firms to put concrete action plans in place to protect themselves.

Now the central bank has also unveiled the CBEST framework, which uses intelligence from government and accredited commercial providers to identify potential attackers to a particular financial institution.

It then replicates the techniques these potential attackers use in order to test the extent to which they may be successful in penetrating the defences of the institution. When the tests are completed, there will be workshops for the firms involved to work through the results with the testers and supervisors.

The BofE says that by using real threat intelligence, CBEST will help banks, infrastructure providers and regulators improve their understanding of the types of cyber-attacks that could undermine the UK's financial stability and how vulnerable the industry is to them.

In a speech unveiling the framework, Andrew Gracie, executive director, resolution, BofE, says: "The results should provide a direct readout on a firm's capability to withstand cyber-attacks that on the basis of current intelligence have the most potential, combining probability and impact, to have an adverse impact on financial stability."

The framework, which banks can sign up to on a voluntary basis, was put together by the BofE with the Council for Registered Ethical Security Testers (Crest), a not-for-profit organisation that represents the technical information security industry and Digital Shadows, a cyber-intelligence vendor.

Comments: (0)

Comment on this story (membership required)

Finextra news in your inbox

For Finextra's free daily newsletter, breaking news flashes and weekly jobs board: sign up now

Related stories

New York to step up assessment of bank cyber-security plans

New York to step up assessment of bank cyber-security plans

08 May 2014  |  10739 views  |  0 comments | 10 tweets | 8 linkedin
SEC to conduct market-wide cyber-security checks

SEC to conduct market-wide cyber-security checks

16 April 2014  |  5859 views  |  0 comments | 3 tweets | 3 linkedin
As cyber threat grows, EU regulators warn FS firms on IT budgets

As cyber threat grows, EU regulators warn FS firms on IT budgets

03 April 2014  |  6589 views  |  0 comments | 9 tweets | 2 linkedin
White House sets out voluntary cybersecurity framework

White House sets out voluntary cybersecurity framework

13 February 2014  |  5689 views  |  0 comments | 12 tweets | 8 linkedin
BofE says banks under cyber-attack

BofE says banks under cyber-attack

29 November 2013  |  5895 views  |  0 comments | 10 tweets | 7 linkedin
London banks embark on 'Waking Shark 2' cyber war games

London banks embark on 'Waking Shark 2' cyber war games

12 November 2013  |  5741 views  |  0 comments | 3 linkedin

Related company news


Related blogs

Create a blog about this story (membership required)
visit vasco.com/news/PSD2-compliant-solutionsvisit www.ncr.comvisit www.finastra.com

Top topics

Most viewed Most shared
German fintech factory FinLeap raises EUR39 millionGerman fintech factory FinLeap raises EUR3...
12895 views comments | 19 tweets | 15 linkedin
Mastercard to buy AI outfit BrighterionMastercard to buy AI outfit Brighterion
8961 views comments | 14 tweets | 20 linkedin
Barclays rides payments-as-a-service wave with investment in Form3Barclays rides payments-as-a-service wave...
8139 views comments | 16 tweets | 12 linkedin
hands typing furiouslyThe Digital Trade Chain: the blockchain tr...
7833 views 0 | 5 tweets | 16 linkedin
Mastercard and Scotiabank join Enterprise Ethereum AllianceMastercard and Scotiabank join Enterprise...
6579 views comments | 25 tweets | 15 linkedin

Featured job

New York, NY - USA (some flexibility on location)

Find your next job