Everyone concerned must bear responsibility: the technical experts, every single user and the supervisors. The global ransomware attacks have once again clearly demonstrated how vulnerable digital infrastructures are. Last year, BaFin and the Bundesbank, along with representatives from banks and banking associations, discussed the supervisory requirements for information technology.
These requirements were drawn up to encourage a more detailed examination of supervisory expectations on the technical and organisational resources specified in the Minimum requirements for risk management (MaRisk), to clarify them and to render them more transparent.