The Horizon Monitor: Regulatory Resilience: Week 44
Who should read this edition
Most Affected this Week | Chief Information Security Officers, heads of vulnerability management, IT operations and DevSecOps in every sector running PHP, eMudhra certificates or the LiteLLM AI gateway. CROs and CISOs of ECB significant institutions facing the 31 October deadline for AI cyber action plans. |
Essential Reading | Chief Operating Officers, Heads of Operational Resilience and Heads of Technology Risk in PRA regulated banks and insurers and FCA regulated firms using AI. Finance and operational risk leads in Indian commercial banks rebuilding the operational risk Business Indicator. |
Of Interest to | Third party risk and procurement leads assessing open source and certificate supply chains; incident management and crisis teams tracking EU and US reporting reform; UK managed service providers and data centre operators following the Cyber Security and Resilience Bill; and offshore regulated firms with UK, EU or Indian group exposure. |
In a week in which the supply chain moved faster than the rulebook, the public event was the critical PHP event, certificate authority and AI tooling compromises that required immediate action. It was during this that the PRA signalled that Operational and Cyber Resilience will be supervised with the same weight as Capital.
Comments