terça-feira 23 julho 2024, 12:00 to 13:00 BST
Location: Virtual
The next instalment in our DORA webinar series will mark six months to go before the EU’s Digital Operational Resilience Act starts to apply. The European Supervisory Authorities are about to put the finishing touches to their second batch of DORA technical standards. These will include important rules for financial firms and their tech providers on sub-contracting, incident reporting and threat-led penetration testing.
Join us for this webinar in which we will outline what the technical standards aim to do, how the draft texts have changed and what happens next.
quinta-feira 20 junho 2024, 12:00 to 13:00 GMT
Location: Virtual
Financial firms and their tech providers are accelerating their implementation of the EU’s Digital Operational Resilience Act. But as we rapidly approach January’s DORA deadline, important legal questions remain outstanding. How you approach these issues will have a meaningful impact on your DORA projects and ongoing compliance.
Join us for this webinar on 20 June, 12:00 BST on how DORA applies to delegated financial services, the scope of ICT services and critical or important functions and how firms and ICT service providers should approach the rules on subcontracting.
quinta-feira 16 maio 2024, 14:00 to 15:00 GMT
Location: Virtual
As the clock ticks down to the 17 January 2025 deadline, implementation projects are moving into a critical stage and more people are having to grapple with what DORA means in practice. Join us on 16 May for a webinar during which we will give an introduction to the regime and the key points for you to note.
quinta-feira 21 março 2024, 12:00 to 13:00 GMT
Location: Virtual
There is less than a year left for asset managers to prepare for the EU’s Digital Operational Resilience Act. Join us on 21st March, 12:00 for this Asset Management spotlight virtual session where Raza Naeem and Marie-Christine O’Mahony (Linklaters) and Sarah Thompson and Ian Duffy (Arthur Cox) will discuss key aspects of the upcoming DORA regime; the interplay of the new rules with existing rules and guidance in Luxembourg and Ireland; and the key considerations for asset management firms as they continue their implementation journeys.
quarta-feira 31 janeiro 2024, 12:30 to 13:30 GMT
Location: Virtual
Join us for this webinar on 31 January at 12:30 GMT in which we will work through the draft DORA Level 2 regulatory technical standards and implementing technical standards, highlight recent changes to these RTS and ITS and look ahead to what firms need to do next.
11 dezembro 2023
In a consultation the UK financial regulators have proposed rules for providers of critical services to the financial sector. The FCA, PRA and Bank of England explain how service providers will be designated as critical and the rules that would apply to these critical third parties.
17 outubro 2023
This guide to DORA summarises the EU's Digital Operational Resilience Act. It provides an overview of the requirements for financial entities and providers of ICT services.
quarta-feira 19 julho 2023, 12:00 to 13:00 GMT
Location: Virtual
Thank you for joining our DORA technical standards webinar during which we walked through the RTS and ITS, highlighting the practical implications for your business, and talked about what an effective DORA implementation plan looks like.
This webinar was of interest to all EU financial entities, including banks, insurers, asset managers and payments firms, as well as firms providing ICT services to the financial sector.
terça-feira 4 outubro 2022, 09:00 to 10:00 GMT +1
Location: Global
The financial services sector has gone digital. The technology that firms rely on brings benefits but also introduces new risks when firm’s operations are disrupted. To address this, the EU is expected to finalise a digital operational resilience act in the coming weeks.
Known as DORA, the new regulation will require practically all financial entities in the EU to apply uniform standards for managing ICT risks. Join our webinar to hear our panel of experts discuss what DORA does, what happens next and experiences of implementing the equivalent UK requirements.
15 março 2022
The Cyber Incident Reporting for Critical Infrastructure Act has been unanimously approved by the U.S. Senate. This requires critical infrastructure entities and federal agencies to report significant cyber incidents within 72 hours of the incident and within 24 hours if a ransomware payment was made.
25 fevereiro 2022
In the past few weeks, governments around the world, including the UK, US, Australia and New Zealand, have issued warnings that Russia’s invasion of Ukraine could lead to intentional or spillover cybersecurity attacks on organizations outside the region. It Is clear from our conversations with third parties and our threat intelligence partners that there is without a doubt increased malware activity, as well as scans targeting corporations.
26 janeiro 2022
Russia’s crackdown on hacker group, REvil, is a good sign but days later Ukrainian government sites were taken down, allegedly by Russian hackers. The link between cybersecurity and US national interest has not escaped the SEC who are expected to continue to take a tough stance on cybersecurity.
25 novembro 2021
The Telecommunications (Security) Act 2021 is likely to impose some of the world’s toughest cyber security obligations. We consider the reasons for this step change and the practical compliance challenges.
23 novembro 2021
In our eighth webinar of the Global Business Crime Outlook Series, we will be discussing a range of topics including compliance, litigation and arbitration in the event of a cyber-attack with a particular focus on Latin America.
7 outubro 2021
Using artificial intelligence in the financial sector requires careful consideration of the regulatory framework. For example, UK firms deploying AI must take into account not only high-level principles, activity-specific rules and their reliance on third parties, but also how the novel features of AI models interact with individual accountability requirements.
2 setembro 2021
The SEC is done playing around. This summer it has demonstrated its resolve bringing actions against public companies for alleged poor disclosures, and against SEC registrants for alleged poor cybersecurity controls.
22 julho 2021
The New York Department of Financial Services has joined the fight against ransomware issuing guidance to assist companies prepare and respond to ransomware. We consider the lawyer’s role in responding to this guidance.
28 junho 2021
Our global cybersecurity team shares 5 key steps you can take today to improve your organization's cybersecurity.
20 abril 2021
The UK financial services regulators have put the final touches to their new set of rules on operational resilience. Firms have been given one year to get ready before the regime starts to apply.
29 março 2021
Nearly three years in the making, the FCA, PRA and Bank of England have finalised their proposed rules on operational resilience. The first key deadline for compliance is 31 March 2022.
25 março 2021
In this speech at the OpRisk Global conference, Julia Dixon and Pansy Wong share their insights on how financial institutions can set themselves up for success when implementing their Operational Resilience Programs.
19 março 2021
Nothing causes as much despair in the world of IT as an “upgrade” that goes wrong. For a financial services firm, a failed IT upgrade can cause severe disruption to customers and so the UK Financial Conduct Authority (FCA) has recently looked at how financial services firms update their technology. Its findings are a prelude to incoming rules on operational resilience.
18 março 2021
As technology entrenches itself in financial services, policymakers are looking more closely at the sector’s exposure to the risks of digitalisation. In this briefing we summarise the European Commission’s proposals for a Digital Operational Resilience Act, known as DORA, which would apply to not only EU financial entities but also some technology service providers.
18 março 2021
The incoming UK operational resilience regime represents a major exercise in regulatory change management. This one-pager provides a high level overview of the main rules, key defined terms and upcoming dates.
10 março 2021
The UK regulators are preparing to require firms to embed an operational resilience framework within BAU operations by 2024. The three-year transition hints at the significant design and implementation work that will need to be completed. This regulatory change, which comes hot on the heels of recent high-profile disruption in financial services and the Covid-19 pandemic, makes operational resilience the perfect case study when it comes to considering effective Board oversight and governance.
9 fevereiro 2021
The FCA is due to finalise new requirements on operational resilience which will impact a broad range of UK financial institutions. Before then, it has released its findings from a review on how financial firms manage, or in some cases fail to manage, IT upgrades and other technology changes. In this summary we highlight some of the FCA’s findings and suggest lessons for firms to build into their operational resilience planning
Our new FRG blog where you will find insights, commentary and news on recent developments in financial regulation from our dedicated financial regulatory lawyers in London.