meta_id 3299633

On July 3, 2026, the National Agency for Information Systems Security (ANSSI), the Prudential Supervision and Resolution Authority (ACPR), and the Banque de France signed a cooperation agreement to strengthen information sharing and coordination in response to cyber threats affecting the financial sector. The agreement, announced on July 6, 2026, aligns with the requirements of the Network and Information Systems Directive 2 (NIS 2) and the Digital Operational Resilience Act (DORA). Under the agreement, the ANSSI will lead technical incident response actions for cybersecurity incidents affecting financial entities through the National and Governmental Centre for Monitoring, Alert and Response to Computer Attacks (CERT-FR). The ACPR will ensure compliance with DORA regulations across all financial sector entities, while the Banque de France will oversee the resilience of financial infrastructure. The three institutions will collaborate on cyber incidents and threats, mutual controls and assistance, cyber crisis management, and threat-led penetration testing (TLPT) to assess the robustness of information systems. This agreement renews cooperation that began in 2018 between the three authorities and reflects their commitment to anticipating the escalating cyber risk landscape in France's financial sector. The enhanced coordination is driven by European regulatory requirements and aims to protect the financial system through strengthened information exchange on cyber incidents and crisis management protocols. Vincent Strubel, chief executive of the ANSSI, underscored the importance of this renewed cooperation in addressing the evolving cyber threat environment.