New regulatory requirements in patch management - Luxembourg

Cybersecurity is a major issue in the financial sector and a top priority for regulators. Regulatory pressure has intensified in May 2017 with the publication of CSSF Circular 17/655, which requires banks and investment firms to strengthen their controls in the field of patch management.

This is no surprise considering the recent massive outbreaks of ransomware and malware – WannaCry on 12 May 2017 and NotPetya (or Nyetna) on 27 June 2017 – both leveraged a vulnerability in Microsoft Windows computers, which had been fixed by Microsoft back in mid-March 2017.

Explore the challenges raised by the new regulatory requirements in the field of patch management : What are the new requirements? Where do you stand? How Deloitte can help?

Read more: https://www2.deloitte.com/lu/en/pages/risk/articles/new-regulatory-requirements-patch-management.html