APA OTS News: OENB and FMA implement mandatory protective measures against cyber attacks in the financial sector

“Ethical hacker: inside” simulate cyber attacks to

Weak points in critical IT systems from financial companies

to recognize

Vienna (APA -OTS) – The Austrian National Bank (OENB) and the

Austrian

Financial market supervision (FMA) today have the starting signal for the

Mandatory implementation of simulated cyber attacks with help

From “ethical hacker: inside” as protective measures for selected

Financial company in Austria. With this step

OENB and FMA another significant contribution to strengthening the

Financial market stability in an increasingly networked and

digitized environment.

With the publication of the updated Tiber-AT

Implementation Guide set the OENB and FMA a significant requirement of the

Digital Operational Resilience Act (Dora). Tiber stands for Threat

Intelligence-Based Ethical Red Teaming and is one of the European

System of central banks (ESZB) developed framework for

Combating cyber risks. In doing so, “ethical hackers: inside”

Cyber attacks on the IT systems of financial companies.

With the applicability of Dora and the technical

Regulatory standards of the European financial supervisory authorities

This so-called threat-Led penetration testing (tlpt) is the

Implementation of simulated cyber attacks for systematic

Financial companies that offer central financial services in

In principle, the EU mandatory in a three-year cycle. Included

it is about real cyber attacks under strictly controlled

To simulate conditions and thereby weak points in critical IT

-systems of financial companies.

With the publication of the Tiber-AT implementation Guide im

November 2023 was the European Tiber framework (Tiber-EU)

implemented for the first time in Austria and as part of a pilot phase

applied. There were already some financial companies with

your voluntary participation in a Tiber-At Test valuable

Gain experience and strengthen your cyber resilience. Due to the

New regulatory requirements according to Dora were both that

Tiber-EU framework as well as the Tiber-AT implementation Guide

Updated.

The Tiber Cyber Team Austria (TCT-AT) of the OENB will

Accompany cyber resilience tests closely and thus their consistent

and ensure that the rules are carried out. After the test is completed

If an official certificate is carried out by the FMA or the

European Central Bank (ECB), which also includes the conformity of the tests

is confirmed with the legal requirements.

Further information can be found on the FMA and

The Oenb.

Retailing:

FMA media spokesman

Boris Gröndahl

Telephone: +43 1 24959-6010 / +43 676 8824 9995

Email: [email protected]

Digital press kit: http://www.ots.at/pressemappe/694/aom

*** OTS original text press release under exclusively

In terms of content of the field – www.ots.at ***

OTS0039 2025-07-29/10: 16

ttn-28