DNB shares cybersecurity observations in the annual Information Security monitor 2021

These threats lay emphasis on the cyber-resilience of financial institutions. In our Information security monitor (December 2021) we present our latest observations on information security and cyber risks, based on supervisory examinations and information obtained from financial institutions. The observations in this Information Security Monitor are based on the examinations conducted in 2020-2021 and sector-wide requests for information primarily sent to pension funds and insurers. These sources have been supplemented with signals and incident reports from institutions and information exchanged with other supervisory authorities and partnerships. Where relevant, these information sources have also been incorporated in this Information Security Monitor.

The following three key observations are relevant for executive board members and internal supervisors (such as members of supervisory boards):

• The information security risk management cycle is not sufficiently effective
• Management of information security in the entire outsourcing chain remains crucial
• Resilience to cyberattacks must be strengthened

In addition to these key observations we see the need to improve knowledge of information security at an executive board level. Constructive input and critical questions from executive board members and internal supervisors help the institution to make appropriate strategic and tactical choices. We also believe further cooperation between all parties in the financial sector is essential in order to increase the resilience of institutions and the entire outsourcing chain.

These observations have been set out in further detail in the Information Security Monitor.

You van download the Information Security Monitor below. For more information see the Q&A Assessment Framework for DNB Information Security Examination.