17 December 2018

ECB: TIBER-EU White Team Guidance

The Threat Intelligence-based Ethical Red Teaming (TIBER-EU) Framework enables European and national authorities to work with financial infrastructures and institutions to put in place a programme to test and improve their resilience against sophisticated cyber attacks.

The ECB published the TIBER-EU Framework (TIBER-EU Framework: How to Implement the European Framework for Threat Intelligence-based Ethical Red Teaming) and TIBER-EU Services Procurement Guidelines, respectively. This TIBER-EU White Team Guidance (“Guidance”) is referred to in, and is an integral part of, the TIBER-EU Framework.

TIBER-EU is an instrument for red team testing, designed for use by core financial infrastructures, whether at national or at European level, which can also be used by any type or size of entity across the financial and other sectors. At the same time, TIBER-EU is designed to be adopted by the relevant authorities in any jurisdiction, on a voluntary basis and from a variety of perspectives, namely as a supervisory or oversight tool, for financial stability purposes, or as a catalyst.

TIBER-EU facilitates red team testing for entities which are active in more than one jurisdiction and fall within the regulatory remit of several authorities. TIBER-EU provides the elements allowing either collaborative cross-authority testing or mutual recognition by relevant authorities on the basis of different sets of requirements being met.

When an authority adopts TIBER-EU, tests will only be considered TIBER-EU tests when they are conducted in accordance with the TIBER-EU Framework, including the TIBER-EU Services Procurement Guidelines and the TIBER-EU White Team Guidance.

The team that manages the test, in accordance with the TIBER-EU Framework, within the entity that is being tested, is called the White Team. The purpose of this document is to provide further guidance about the roles and responsibilities of the White Team.

Full publication

© ECB - European Central Bank