A glitch at one Cloud Company could potentially bring down services across many financial firms
As financial firms in the European Union (EU) rely more for key services on ‘cloud computing’ giants such as Amazon, Microsoft, Google and IBM, the financial firms will have to show how quickly they could recover from a cyber-attack, the EU said on Monday.
Regulators worry about the speed and scale at which banks, insurers and investment firms are moving critical functions and market operations onto a handful of cloud platforms.
Regulators have said that a glitch at one Cloud Company could potentially bring down services across many financial firms.
For the new Digital Operational Resilience Act, known as DORA, the EU Council, which represents the 27 member states, said it has completed the bloc’s final approval stage.
Zbynek Stanjura, finance minister for the Czech Republic, which holds the EU presidency, said, banks and other financial firms already have plans for IT security but more was needed so they stay resilient through a severe disruption.
“Thanks to the harmonised legal requirements which we adopted today, our financial sector will be better able to continue to function at all times,” Stanjura said.
The requirements will apply to financial firms and “critical” third parties supplying cloud based services.
“If a large-scale attack on the European financial sector is launched, we will be prepared for it,” Stanjura said.
To implement the new law, the bloc’s securities, insurance and banking watchdogs will write technical rules.
The law will come into force around the end of 2024 as the European Parliament, which had joint say, has already given the green light.
Britain, no longer in the EU, said in June its regulators will be given powers to designate which outsourced services can come under direct supervision of the Bank of England and Financial Conduct Authority.
CIO News, a proprietary of Mercadeo, produces award-winning content and resources for IT leaders across any industry through print articles and recorded video interviews on topics in the technology sector such as Digital Transformation, Artificial Intelligence (AI), Machine Learning (ML), Cloud, Robotics, Cyber-security, Data, Analytics, SOC, SASE, among other technology topics