With respect to all depository institutions, this framework maintains the traditional aim of protecting the DIF and limiting the use of insured deposits to engage in nonbank activities. With respect to banks of a certain size – even those predominantly involved in conventional lending activities – a macroprudential aim should be added.
We conducted a successful pilot phase in 2016. And now we will implement a long-term solution for all those banks that we directly supervise. As from this summer, they will be required to report all significant cyber incidents. This will help us to assess more objectively how many incidents there are and how cyber threats evolve.