RegAlert2021-12-16
Added · Updated
Log4j Critical Vulnerability
Authorised Persons are required to assess their potential exposure to the Log4j critical vulnerability and apply adequate mitigation measures in a timely manner. They must continue to monitor developments and follow official guidelines as the situation remains developing. The Authority reminds these entities of the expectation to employ continuous monitoring and maintain sound threat and vulnerability management processes for their Information and Communications Technologies.
MFSA published 4 documents in the last 30 days — get each new one by email the day it lands.
Circular
Triq l-Imdina, Zone 1 Central Business District, Birkirkara CBD 1010 +356 2144 1155 communications@mfsa.mt www.mfsa.mt Log4j Critical Vulnerability On 15 December 2021, ENISA, the EU Agency for Cybersecurity has released a Joint Statement together with the European Commission, CERT-EU, and the network of the EU national computer security incident response teams (CSIRTs network), regarding a Critical Vulnerability on a Java-based logging package, Log4j. Authorised Persons are expected to assess their potential exposure to this vulnerability and to apply adequate mitigation measures in a timely manner by following official guidelines. At the time of writing, ENISA states that this is still “a developing situation” and therefore it is highly recommended that Authorised Persons continue to follow any developments and recommendations as necessary. The Authority would like to remind Authorised Persons of their expectation to employ continuous monitoring to identify potential threats to, and vulnerabilities in, their Information and Communications Technologies, in a timely manner, whilst having sound threat and vulnerability management processes and practices in place. Authorised Persons may request further information by sending an email to the Supervisory ICT Risk and Cybersecurity function within the MFSA on sirc@mfsa.mt. 16 December 2021
Read the rest free
Source: Malta Financial Services Authority — original document · Summary generated with machine assistance and reviewed before publication; the authoritative text is the regulator's original document. How RegAlert works
More like this from MFSA
MFSA published 4 documents in the last 30 days. We email you each new one the day it's published.