Regulatory Alerts2025-06-18
Added · Updated
Commission Delegated Regulation under Regulation (EU) 2022/2554 on Digital Operational Resilience for the Financial Sector Published in the EU Official Journal (Update 5)
The Malta Financial Services Authority issued this circular to announce the publication of Commission Delegated Regulation (EU) 2025/1190 in the EU Official Journal. This regulation supplements the Digital Operational Resilience Act by establishing regulatory technical standards for threat-led penetration testing, including criteria for identifying entities, requirements for internal testers, and methodologies for testing phases. The Authority notes that the remaining technical standard is expected to be adopted soon and provides specific contact emails for supervisory ICT risk and TLPT-related queries.
Topics
Share