Obligations of Financial Entities in the Area of Cybersecurity in Light of European Union Legislation
PDF (Język Polski)

Keywords

Cybersecurity
Cyber risk
Digital operational resilience
ICT risk
DORA

How to Cite

Szulc, A. (2024). Obligations of Financial Entities in the Area of Cybersecurity in Light of European Union Legislation. Zeszyt Prawniczy UAM, (14), 145–157. https://doi.org/10.14746/zpuam.2024.14.12

Abstract

The choice of subject matter for this article is justified by the process of updating the legal framework for the financial sector in fields of digital resilience processes and standards as part of the EU digital single market policy. The aim of the article is to explain changes in the legal environment of financial entities and the community approach to the issue of information security as a result of the transformation of the digital environment. Another goal is to review the cybersecurity requirements of these institutions. Using theoretical studies, the legal-dogmatic method and document analysis, the requirements imposed on financial institutions in terms of ensuring protection and counteracting cyber threats are analysed.

https://doi.org/10.14746/zpuam.2024.14.12
PDF (Język Polski)

References

Banasiński, C. (red.). (2023). Cyberbezpieczeństwo. Zarys wykładu. Warszawa.

Calliess, C., Baumgarten, A. (2020). Cybersecurity in the EU The Example of the Financial Sector: A Legal Perspective. „German Law Journal” 21(6): 1149–1179. DOI: https://doi.org/10.1017/glj.2020.67

Cebula, J.J., Popeck, M.E., Young, L.R. (2014). A Taxonomy of Operational Cyber Security Risks Version 2. Software Engineering Institute, Carnegie Mellon University, Pittsburgh, PA. DOI: https://doi.org/10.21236/ADA609863

Krüger, P.S., Brauchle, J.-P. (2021). The European Union, Cybersecurity, and the Financial Sector: A Primer. Washington, DC.

Lichosik, A. (2023). DORA jako prawny instrument ochrony cyfrowego bezpieczeństwa rynku finansowego. „Studia Prawnoustrojowe” 62: 367–377. DOI: https://doi.org/10.31648/sp.9581

Malaguti, M.C., Delort, D., Lee, C. (2022). Legal Framework for Cybersecurity in the Financial Sector: A Comparative Study on Existing Domestic or Regional Legislation on Cybersecurity. Washington, DC.

Markopoulou, D., Papakonstantinou, V., De Hert, P. (2019). The New EU Cybersecurity Framework: The NIS Directive, ENISA’s Role and the General Data Protection Regulation. „Computer Law & Security Review” 35(6): 1–19. DOI: https://doi.org/10.1016/j.clsr.2019.06.007

Nadolska, A. (2021). Soft law w regulacji rynku finansowego w Polsce: rekomendacje, wytyczne i lista ostrzeżeń publicznych KNF. Warszawa.

Pavlidis, G. (2021). Europe in the Digital Age: Regulating Digital Finance without Suffocating Innovation. „Law, Innovation and Technology” 13(2): 464–477. DOI: https://doi.org/10.1080/17579961.2021.1977222

Szpringer, W. (2022). Platformizacja gospodarki cyfrowej – nowe wyzwania dla regulacji. Warszawa.

Vandezande, N. (2024). Cybersecurity in the EU: How the NIS2-directive Stacks up against Its Predecessor. „Computer Law & Security Review” 52: article 105890. DOI: https://doi.org/10.1016/j.clsr.2023.105890