|
|
The first change covered in the new 2017 rulebooks is the updated definition of the term ‘Major Incidents’. This definition change constitutes a regulatory change. The updated definition of this term now refers to the Eurosystem major incident reporting framework for payment schemes and retail payment systems entering into force on 1 January 2019. The new definition also points to the document 190-18 ‘Details about major incident reporting for scheme participants’.
Until now, there was unclarity for the EPC scheme participants as of when an operational or information security incident should be interpreted as a ‘major incident’. The concerned Eurosystem framework provides now further clarity in this matter. The EPC scheme participants are obliged to report such major incident directly to the EPC.
To assist the EPC scheme participant in its assessment whether an operational or information security incident fits the criteria of a major incident and needs to be reported to the EPC or not, the has developed the document EPC 190-18 outlining the detailed assessment criteria. The document EPC 190-18 is not publicly available. The EPC shares this document directly with all existing and future EPC scheme participants.
Secondly, the new 2017 SCT, SCT Inst, SDD and SDD B2B rulebooks also include the updated version 4.2 of the Scheme Management Internal Rules (SMIRs) which are an integral part of each scheme rulebook. The concrete changes made in this version of the SMIRs are outlined on the cover page of the new SMIRs.
No changes have been made in the business and operational rules of the updated 2017 EPC SEPA scheme rulebooks or the related implementation guidelines.