Volume: 12 Issue: 1
(January 2018)

Keywords:
eb finalises new requirements managing operational security risks 12 december 2017 european banking authority (‘eb published final report guidelines

Jurisdictions:
Europe

The EBA finalises its new requirements for managing operational and security risks

On 12 December 2017, the European Banking Authority (‘EBA’) published the Final Report on the Guidelines on the security measures for operational and security risks of payment services under Directive (EU) 2015/2366 (‘PSD2’) (EBA/GL/2017/17) (‘Guidelines’). The Guidelines introduce new regulatory requirements which do not only concern risk management but also IT and cyber security. Here, Dr Nils Rauer and Andreas Doser of Hogan Lovells International LLP detail the components of the Guidelines and the requirements therein for payment service providers (‘PSPs’), before examining issues around the practical implementation of the Guidelines for firms.