Sebastien Rousseau

CATEGORY

Policy & resilience

DORA, EU AI Act, NIST standards, third-party risk — the supervisory pressure shaping technology decisions.

4 tags

Tags in this category

  • DORA — 63 articles

    Digital Operational Resilience Act — register of information, ICT third-party risk, threat-led penetration testing, and the operational resilience programme banks must run.

  • EU AI Act — 8 articles

    Implementation guidance, supervisory expectations, high-risk system classification, and the conformity-assessment burden the Act puts on banks.

  • NIST — 5 articles

    NIST standards relevant to banking — FIPS 203/204, AI RMF, SP 800/1800 series — and the supervisory adoption patterns around them.

  • Third-party risk — 5 articles

    ICT third-party risk under DORA, EBA outsourcing guidelines, and the supervisory expectation around critical-vendor concentration.

INFRASTRUCTURE & CRYPTOGRAPHY

Migrasi Mustahil Tanpa Enumerasi: CBOM Yang Bank Masih Tiada

Setiap pelan hala tuju pasca-kuantum mengandaikan satu inventori yang tidak wujud. Daftar aset tahu pelayan, pemilik dan tahap kritikalnya; ia tidak tahu algoritma, panjang kunci, pustaka atau tarikh tamat tempoh.