Enhancing cyber resilience: a closer look at Romania’s TIBER-RO framework and distinctions from penetration testing (PenTest)
The TIBER-RO Framework mandates the execution of cyber resilience assessments by entities operating within the financial sector of Romania.
The National Bank of Romania issued Regulation No. 6/2022 on May 3, 2022, which was also published in the Official Gazette No. 432/03.05.2022, regarding TIBER-RO, the framework for performing cybersecurity resilience tests.
The Regulation applies to financial market infrastructure administrators, located in the monitoring area of the National Bank of Romania, as well as to credit institutions designated as critical participants in financial market infrastructures. These entities will perform a TIBER type test once every 3 years. The other institutions participating in the financial market infrastructures can carry out these types of tests voluntarily.
Data Core Systems Stands Ready in Supporting Organizations and Institutions Participating in TIBER-RO.
Data Core Systems can provide guidance on implementing cybersecurity measures, conducting red teaming exercises, offering effective cyber threat intelligence and targeted cyber threat intelligence information services, incident response planning, and facilitating knowledge transfer to bolster cyber defense capabilities.
The Difference Between Penetration Testing and TIBER-EU (Threat Intelligence-Based Ethical Red Teaming for the European Union).
Penetration Testing and TIBER-EU are both cybersecurity assessment methodologies, but they have several key differences:
Purpose:
PenTest: The primary goal of a penetration test is to identify vulnerabilities in a system, network, or application. It is typically focused on finding technical weaknesses that could be exploited by attackers. The objective is to uncover and document vulnerabilities for remediation.
TIBER-EU: It aims to evaluate the overall cybersecurity resilience of financial institutions. It focuses not only on technical vulnerabilities but also on the institution’s ability to detect, respond to, and mitigate advanced cyber threats. The goal is to enhance an institution’s cybersecurity posture and incident response capabilities.
Scope:
PenTest: Penetration tests are often limited in scope and may target specific systems, applications, or network segments. The scope is defined by the organization requesting the test.
TIBER-EU: It has a broader scope that encompasses the entire organization, including people, processes, and technology. It assesses the institution’s overall cybersecurity framework, threat intelligence capabilities, and incident response readiness.
Methodology:
PenTest: Penetration testing follows a structured methodology where ethical hackers attempt to exploit known vulnerabilities and weaknesses in a controlled environment. The focus is on technical vulnerabilities and their potential exploitation.
TIBER-EU: It employs a more complex and intelligence-driven approach. It simulates advanced, persistent threats (APTs) and the entire lifecycle of a cyberattack, from initial reconnaissance to data exfiltration. Threat intelligence is integrated to replicate real-world cyber threats specific to the financial sector.
Reporting:
PenTest: Penetration test reports typically detail the vulnerabilities discovered, their severity, and recommendations for remediation. The emphasis is on technical findings.
TIBER-EU: TIBER-EU reports provide a comprehensive view of the institution’s cybersecurity resilience. They include insights into the threat landscape, the effectiveness of existing security measures, and recommendations for improving overall cybersecurity, incident response capabilities, and threat intelligence integration.
To sum up
The introduction of the TIBER-RO framework represents a significant step toward strengthening cybersecurity resilience within the Romanian financial sector. Data Core Systems stands ready in supporting these organizations and institutions as they embark on their TIBER-RO journeys, offering cybersecurity measures, red teaming exercises, threat intelligence services, incident response planning, and knowledge transfer to fortify their cyber defense capabilities.
Furthermore, it’s necessary to distinguish between Penetration Testing and TIBER-EU, respectively TIBER-RO. While both serve essential roles in assessing and enhancing cybersecurity, they have distinct focuses, scopes, methodologies, and reporting styles. For more information, don’t hesitate to contact us.