Call us now:
It’s positive to see the UK government’s CBEST assessment of systemically important banks. But we’re living 10 years behind the curve. It’s worrying that CBEST remains central to UK regulatory priorities for cyber and operational resilience and supports financial stability and global competitiveness.
It’s equivalent to relying on Cyber Essentials as a strategic capability for UK industry. At a time when the EU is moving rapidly ahead with DORA and NIS2, the UK seems to be lumbering around in outdated and outmoded solutions for what are very significant issues for UK industry.
While one can appreciate the reference to the NIST CSF control regime functions. One has to be careful in referencing it. CBEST is not an evaluation of CSF compliance; there are over 100 subcategories of evaluation.
For it to be truly central, it has to represent EU DORA, NYDFS, or Abu Dhabi ADGM cyber regulations, more than Cyber Essentials. Without it, there will come a point at which UK financial markets cannot demonstrate their security and competitiveness.
@Thaddeus Dziekanowski Brian D. McCarthy
@Parava Security Solutions
#cybersecurity #cyberriskmanagement
https://lnkd.in/eUHKKGNk
https://lnkd.in/exQj7AMA
View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3Ashare%3A7420390240067944448