Cybersecurity regulation in Croatia

Information-security, cyber-risk and incident-reporting requirements for financial institutions. 8 publications, summarized in English and updated same-day.

Regulation on Additional Organizational Requirements for Alternative Investment Fund Management Companies

Croatia

HANFA

Regulation on Organizational Requirements for UCITS Fund Management Companies – Unofficial Consolidated Text (Official Gazette, Nos. 41/17, 87/22 and 155/25)

Croatia

HANFA

2025-07-11

Guidelines on Reporting Significant ICT Incidents and Serious Cyber Threats by Hanfa via the National Platform for Collecting, Analyzing and Exchanging Data on Cyber Threats and Incidents

Croatia

HANFA

2025-06-13

Commission Delegated Regulation (EU) 2025/1190 supplementing Regulation (EU) 2022/2554 on Threat-Led Penetration Testing (TLPT) criteria and standards

Croatia

HANFA

2025-03-14

Joint Guidelines on the Assessment of Aggregated Annual Costs and Losses Resulting from Significant ICT Incidents under Regulation (EU) 2022/2554 (JC 2024 34)

Croatia

HANFA

2022-12-21

Guidelines for the Appropriate Management of Information System Risks by Supervised Entities

Croatia

HANFA

2022-12-21

Guidelines for the Implementation of Information System Audits by Audit Firms for Supervised Entities

Croatia

HANFA

2022-12-21

Guidelines on Appropriate Risk Management for Information Systems of Supervised Entities

Croatia

HANFA