EBA security awareness training: a quick guide

Learn what the information security directive EBA states about security awareness training.

Is security awareness training required according to EBA?

Yes, the European Banking Authority (EBA) requires security awareness training to ensure that all financial institution staff are aware of cybersecurity risks and their role in protecting critical financial systems.

What requirements does EBA set for security awareness training?

The EBA’s ICT and Security Risk Management Guidelines specify that organizations must implement regular training programs to educate employees about identifying cyber threats, phishing, and other risks. This training should be tailored to employees’ roles and updated to reflect the latest threat landscape.

Where can you find more information about security awareness training for EBA compliance?

Additional information on EBA security awareness training requirements is available on the European Banking Authority’s website. Institutions can also access resources from financial cybersecurity organizations for implementation guidance.