IMF-欧元区：发布金融部门评估计划文件——关于网络风险和金融稳定的技术说明——监管中的若干问题（英）

© 2025 International Monetary Fund IMF Country Report No. 25/213 EURO AREA PUBLICATION OF FINANCIAL SECTOR ASSESSMENT PROGRAM DOCUMENTATION—TECHNICAL NOTE ON CYBER RISK AND FINANCIAL STABILITY—SELECTED ISSUES IN REGULATION AND SUPERVISION This paper on Cyber Risk and Financial Stability was prepared by a staff team of the International Monetary Fund. It is based on the information available at the time it was completed on July 2, 2025. Copies of this report are available to the public from International Monetary Fund • Publication Services PO Box 92780 • Washington, D.C. 20090 Telephone: (202) 623-7430 • Fax: (202) 623-7201 E-mail: publications@imf.org Web: http://www.imf.org International Monetary Fund Washington, D.C. July 2025 EURO AREA FINANCIAL SECTOR ASSESSMENT PROGRAM TECHNICAL NOTE CYBER RISK AND FINANCIAL STABILITY Selected Issues in Regulation and Supervision Prepared By Monetary and Capital Markets Department This Technical Note was prepared in the context of an IMF Financial Sector Assessment Program (FSAP) mission in the euro area held during February 2025. It contains technical analysis and detailed information underpinning the FSAP’s findings and recommendations. Further information on the FSAP program can be found at http://www.imf.org/external/np/fsap/fssa.aspx July 2, 2025 EURO AREA 2 INTERNATIONAL MONETARY FUND CONTENTS Glossary __________________________________________________________________________________________ 3 EXECUTIVE SUMMARY __________________________________________________________________________ 4 INTRODUCTION _________________________________________________________________________________ 8 Context ________________________________________________________________________________________ 8 Assessment scope______________________________________________________________________________ 9 INSTITUTIONAL AND REGULATORY FRAMEWORK __________________________________________ 10 Legal Basis ____________________________________________________________________________________ 10 Other Relevant Regulation and Supervisory and Oversight Expectations ______________________ 10 Organization and Resourcing of Cyber Risk Supervision and Oversight _______________________ 11 Conclusions ___________________________________________________________________________________ 12 Recommendations ____________________________________________________________________________ 13 SUPERVISORY AND OVERSIGHT PRACTICES __________________________________________________ 14 Bank Supervision______________________________________________________________________________ 14 FMI oversight _________________________________________________________________________________ 16 Critical Third-Party Provider (CTPP) Oversight ________________________________________________ 17 Testing and Crisis Exercises ___________________________________________________________________ 18 Incident Reporting ___________________________