ASF regulatory standard on ICT security and governance

Published in the Official Gazette of the Republic of Portugal on June 30, Regulatory Standard 6/2022-R of June 30 of the Portugueses Insurance and Pension Funds Supervisory Authority (“ASF”) regulates the security and governance of information and communications technology (“ICT”), as well as outsourcing to cloud computing service providers.

Key aspects

>   Establishes general requirements and principles on the security and governance of information and communications technology, including cybersecurity;

>   Establishes specific requirements on outsourcing to cloud computing service providers by insurance and reinsurance companies on an individual and group basis.