Marie-France Van Den Branden

🚨 UPDATE CYBER INCIDENT - Rollout of new check-in system at Brussels Airport ongoing: one third of workstations already replaced Brussels Airport has started the accelerated rollout of its new check-in and boarding system. One third of the 500 workstations have already been installed and configured.  A dedicated team of around 20 IT experts is working around the clock to install, configure and test all equipment and software. From tomorrow, Tuesday 30 September, several flights will already be handled through the new system. The gradual transition of other airlines will follow in the coming days, depending on the results of this initial phase. In the meantime, alternative check-in systems remain fully operational to ensure continuity. Thanks to these alternative systems, the situation is under control and there have been no more flight cancellations related to the cyberattack. The airport community, in particular the airlines and handling companies, as well as all the staff involved, have shown exceptional commitment and resilience over the past ten days, allowing more than 700,000 passengers to take off or land at Brussels Airport despite the cyberattack. Brussels Airport would like to reiterate its sincere gratitude to them once again. We would also like to thank all our passengers for their understanding in these exceptional circumstances.

467

7 Comments

❗ 🚨 Update on DORA’s RTS for ICT Subcontracting 🚨 ❗ Following a thorough six-month review, the European Commission (EC) has opted not to adopt the #DORA RTS related to #subcontracting ICT services supporting critical or important functions (#CIFs). 🔹 The RTS outlined specific requirements for risk assessment that financial entities must adhere to when subcontracting ICT services. This encompassed areas such as due diligence, contract management, and continuous monitoring. 🔹 However, the EC has identified that certain provisions exceed the authority granted to the #ESAs under DORA, particularly in terms of subcontractor oversight. 🚫 (“The Commission considers that the requirements introduced by Article 5 of the draft RTS on the “Conditions for subcontracting relating to the chain of ICT subcontractors providing a service supporting a critical or important function by the financial entity” go beyond the empowerment given to the ESAs by Article 30(5) of DORA as introducing requirements not specifically linked to the conditions for subcontracting.”) 🔹 As a result, the ESAs have been tasked with revising the RTS within six weeks ⏳ by eliminating Article 5 and Recital 5, failing which the EC will step in to enforce the modifications. 📌 Significance of the Update: This development has sparked extensive debate and uncertainty in the industry, highlighting the critical need for expert insights. This decision marks the final component required for DORA’s technical standards on ICT third-party risk management, although the #TLPT RTS remains pending. Some financial institutions have already integrated Article 5 provisions into their agreements with tech providers, posing compliance hurdles. The upcoming period is pivotal. Will the ESAs comply with the EC's directive, or are we in for further regulatory adjustments? ⚔️ Expert perspectives and guidance are now more essential than ever as we navigate this evolving regulatory landscape. Full communication available here: [Link to the document provided by the European Commission]

49

Attending #BeCyber today, organized by Belgian Cyber Security Coalition, I had the chance to join an interesting panel — “Cloud sovereignty: can Europe rise to the challenge?” — moderated by Ulrich Seldeslachts (LSEC - Leaders In Security). What struck me most was how sovereignty is no longer a purely technical or compliance debate. It’s about geopolitics, strategic autonomy, resilience, and trust — the foundation for innovation in Europe. The panelists — our colleague Florence Steenackers, Jelle van den Wijngaard, Pascal ROGIEST, and Pascal Steichen — shared thoughtful, pragmatic perspectives: • An "full vertical" European alternative cloud does not exist yet • Sovereignty means protecting both confidentiality and availability of Cloud services and data • Migration to European Cloud is a trade-off: sometimes accepting fewer features for greater independence. • True progress comes from risk-based, step-by-step approaches — hybrid models, consider migrating sensitive services first. • Fully sovereign, disconnected infrastructures have their place for critical data (defense, health, and other critical sectors). Florence Steenackers to add: "At Approach Cyber, we see this every day — our clients want to protect and innovate at the same time. The key is staying pragmatic while keeping sovereignty at the core of resilience."

76

2 Comments

“AI isn’t just building the future — it’s being weaponized faster than we can defend it.” At the Global AI Show 2024, Georges De Moura, Group VP & CISO at EDGE, delivers a chilling reality: from deepfakes to CEO impersonations, attackers are using generative AI to outpace our defenses. The question isn’t if we act — it’s how fast. #GlobalAIShow2024 #GeorgesDeMoura #EDGE #AIethics #Cybersecurity #GenerativeAI #FutureTech #Deepfakes #AIThreats #TechResponsibly #InnovationAndEthics

90

9 Comments