NCSC and FCA clarify sharing cyber incidents under market-abuse rules
Original title: From industry concern to practical action: the value of working with regulators
FCA guidance says sharing incident details with the NCSC can fit normal professional duties under UK market-abuse rules.
The UK NCSC described joint work with industry and the Financial Conduct Authority on when listed firms may share cyber incident information. Some organisations feared UK Market Abuse Regulation duties around inside information. FCA guidance says sharing with the NCSC, and certain NCSC-led communities, may be compatible with those duties, while each firm still assesses its own case. The NCSC and FCA plan further industry engagement.
- Retail-sector incidents prompted wider interest in timely cross-sector sharing.
- Uncertainty concerned Market Abuse Regulation duties overseen by the FCA.
- Guidance covers sharing with government, law enforcement, regulators and trusted communities.
- Firms remain responsible for their own legal and regulatory assessments.
- Organizations
- NCSCFinancial Conduct Authority
- Countries
- United Kingdom
From the original article
3 min read at ncsc.gov.uk
How industry, the NCSC and the FCA worked together to help organisations share information while protecting market integrity
ncsc.gov.uk
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.