Joint Communication by MFSA and CSIRTMalta on Cyber Threats and Vulnerabilities

Circular Triq l-Imdina, Zone 1 Central Business District, Birkirkara CBD 1010 +356 2144 1155 communications@mfsa.mt www.mfsa.mt Joint Communication by MFSA and CSIRTMalta on Cyber Threats and Vulnerabilities Entities operating within the financial services sector are exposed to an increasing number of cyber-attacks, with impacts ranging from significant financial and reputational losses, loss of sensitive data including customer data, and interruptions to business continuity. In this respect, Financial Entities are expected to adopt proportionate situational awareness practices, including Cyber Threat Intelligence, and to follow up on emerging cyber threats and vulnerabilities. CSIRTMalta is the National Computer Security Incident Response Team within the Malta Critical Infrastructure Protection Directorate. It supports Critical Infrastructures, Critical Information Infrastructures and other sensitive infrastructures in protecting their information infrastructure assets and systems from cyber threats and incidents. CSIRTMalta promotes the sharing of unclassified information which may be useful against cyber-attacks and provides alerts and warnings to its constituents. CSIRTMalta is currently issuing security advisories on cyber threats and vulnerabilities through a mailing list and through Twitter (@CSIRTMalta). More information about CSIRTMalta can be found here. The Authority would like to remind regulated Financial Entities of the requirement within the EBA Guidelines on ICT and security risk management and the EIOPA Guidelines on information and communication technology security and governance (cross-referenced within the relevant MFSA Rules), as well as an expectation within the Guidance on Technology Arrangements, ICT and Security Risk Management, and Outsourcing Arrangements, tomonitor internal and external threats as part of the overall security monitoring. Regulated Financial Entities are therefore encouraged to make the best use of the information provided by CSIRTMalta on its information dissemination channels. Regulated Financial Entities may request further information or clarifications by sending an email to the Supervisory ICT Risk and Cybersecurity Function within the MFSA on sirc@mfsa.mt. CSIRTMalta can be contacted via email at csirtmalta@gov.mt or telephone on +356 2568 9800. 18 June 2021