Breaking news

CySEC Adopts New European Guidelines For Cloud Outsourcing And Updates Stress Test Protocols

The Cyprus Securities and Exchange Commission (CySEC) has taken a significant stride toward strengthening regulatory frameworks in the financial sector by implementing the latest European guidelines on cloud outsourcing. In tandem, the commission has issued an advisory regarding enhanced stress test rules for money market funds, signifying a commitment to bolstering both digital operational resilience and market stability.

Cloud Outsourcing Within Regulatory Framework

CySEC has adopted the latest European standards for outsourcing to cloud service providers, targeting select depositaries responsible for safeguarding alternative investment funds and collective investment schemes (UCITS). These guidelines are pivotal for entities that do not fall under the purview of the Digital Operational Resilience Act (DORA), ensuring that supervisory practices remain robust across the board.

Refined Scope Under Digital Operational Resilience

The evolution of the DORA regulation, which now governs digital operational resilience for the majority of financial entities within the European Union, prompted CySEC to revise the scope of its cloud outsourcing guidelines. The updated rules ensure that only the remaining depositaries not covered by DORA adhere to these specific standards, thereby maintaining regulatory relevance without duplicating oversight.

Guidelines To Navigate Cloud Outsourcing Risks

Developed under the auspices of the European Securities and Markets Authority (ESMA), the framework comprises nine detailed guidelines. These directives are designed to assist both regulators and financial entities in identifying, managing, and mitigating risks associated with cloud outsourcing. Key focus areas include the decision to migrate services to the cloud, provider selection, ongoing monitoring, and the establishment of robust exit strategies.

Enhanced Stress Test Protocols For Greater Market Stability

In a parallel move, CySEC has reaffirmed updated European guidelines concerning stress test scenarios for money market funds. Addressed primarily to managers of alternative investment funds and management companies under CySEC’s supervision, these guidelines establish common reference points for assessing the ability of funds to withstand market shocks. This uniform approach is intended to enhance risk assessment practices and fortify the resilience of the sector against potential market disruptions.

Compliance And Future Outlook

The revised cloud outsourcing guidelines and updated stress test parameters underscore a broader regulatory initiative to adapt to rapid digital innovation while maintaining rigorous supervisory standards. As these guidelines are now fully operative following their publication in all European Union languages, CySEC urges all relevant entities to ensure full compliance. The measures not only streamline the supervisory process but also provide a clear roadmap for the financial sector to navigate both technological advancements and market challenges effectively.

Cyprus Opens Draft AI Strategy With 3,000-Professional Target By 2032

Cyprus has released its draft National Artificial Intelligence Strategy for 2026–2032, setting out eight priority sectors, plans to select six national “moonshots” from 16 transformation programmes and a new framework for AI governance. The strategy proposes expanding AI adoption across government, business and research while building a pool of around 3,000 AI professionals by 2032. A public consultation on the draft is open until August 31.

Cyprus is starting from a relatively low level of AI adoption. According to the draft, 9.27% of Cypriot enterprises used AI in 2025, compared with an EU average of 19.95%.

“Yes, we are behind, and we need to catch up,” said Demetris Skourides, Cyprus’ Chief Scientist for Research, Innovation and Technology, during a recent presentation led by TechIsland.

Beyond increasing adoption, the strategy aims to position Cyprus as a trusted AI hub in the Eastern Mediterranean, an EU jurisdiction for AI services and a link between Europe and neighbouring regions. Its eight objectives include improving productivity, developing an inclusive AI ecosystem, transforming public services, strengthening AI skills and infrastructure, and establishing stronger governance and accountability.

The Eight Sectors Targeted For AI Adoption

The draft identifies eight areas where AI could deliver significant economic or public value.

Government and public services could use AI for administrative processes, citizen services and policy decisions, including virtual assistants, automated document processing, fraud detection and predictive analysis.

Finance and fintech are expected to benefit from applications in risk assessment, compliance, fraud prevention and personalised services. The strategy also proposes controlled testing environments for regulated AI products.

Healthcare and life sciences could use AI to improve coordination, support diagnosis, plan resources and advance research, subject to data protection, clinical governance and human oversight.

Tourism and hospitality are identified as another major opportunity, with potential applications including demand forecasting, visitor services, destination management and personalised travel experiences.

For the legal sector, the strategy highlights document analysis, research, case management and regulatory compliance, alongside safeguards for sensitive information.

Education and human capital would focus on personalised learning, digital skills and better monitoring of labour-market needs.

Shipping and maritime services could use AI for route planning, operational efficiency, maintenance, safety and environmental monitoring, building on Cyprus’ existing international presence in the sector.

Finally, entrepreneurship and innovation would receive support through access to testing facilities, expertise and funding for start-ups, researchers and companies developing AI products.

According to Skourides, five sectors are expected to form the first phase of the rollout: finance, tourism, legal services, healthcare and shipping.

For businesses, the proposed opportunities include sector-specific sandboxes, testbeds, funding mechanisms and shared computing infrastructure. Planned public-sector projects could also create opportunities for technology providers and other suppliers, although the draft does not yet define participation terms.

Six National “Moonshots”

The National AI Taskforce has identified 16 potential transformation programmes, with six expected to become national “moonshots” by 2032.

The proposed areas include healthcare coordination, government services, fraud detection, maritime operations, tourism demand forecasting and labour-market knowledge. The aim is to concentrate resources on a smaller number of projects with nationwide impact.

The final six have not yet been selected. According to the strategy, programmes will be assessed based on their potential impact on citizens and businesses, feasibility and expected value.

Large national projects could also create opportunities for technology companies, universities, professional services firms and sector specialists. Their commercial impact will depend on procurement rules, available budgets and the extent to which local companies can participate.

A New Framework For Public-Sector AI

Governance is a central part of the proposal. The draft calls for a National AI Authority to coordinate implementation, monitor compliance and oversee national priorities, alongside an Interministerial AI Council and AI officers or champions within ministries and public bodies.

Other proposed structures include a Government Innovation Hub, centres of excellence for industrial AI and cybersecurity, an AI Skills Observatory, regulatory sandboxes and technical testing facilities.

A shared national infrastructure would also give public bodies, researchers and companies access to computing capacity, cloud services, secure data environments and common AI tools.

The strategy proposes common standards for acquiring, testing and monitoring AI systems. Public bodies would be expected to assess risks, protect personal data and retain human responsibility for consequential decisions.

Some details remain open, including which institution would take on the proposed National AI Authority and how the various councils, hubs and centres would work together.

Building A 3,000-Person AI Talent Pool

Cyprus aims to develop around 3,000 AI professionals by 2032 through new university programmes, professional training, reskilling initiatives and measures to attract specialised talent.

The strategy also recognises that AI skills will be needed beyond technical roles. Public officials, managers, educators, lawyers and professionals in priority sectors will need sufficient knowledge to commission AI systems, assess risks and use the technology responsibly.

A proposed AI Skills Observatory would monitor labour-market demand and help align education and training with employers’ needs.

What Remains To Be Decided

While the draft sets out an extensive programme of infrastructure, training, governance and sector initiatives, several implementation details remain unresolved. The strategy refers to national and European funding sources, but does not yet provide a consolidated budget for individual measures. Timelines also overlap, while responsibilities for some actions have yet to be clearly assigned.

Adoption targets will also need clarification. The draft refers to 50% adoption across government and priority sectors by 2032, a 75% industry target by 2030 and a separate 75% target for government and the public sector by 2032. The document also estimates a potential productivity gain of up to 15%. This represents a projected scenario dependent on investment, adoption and effective implementation rather than a guaranteed economic return.

These gaps make the consultation particularly important, as businesses, researchers and the public can comment on funding, accountability, targets, procurement and access to the proposed programmes.

The public consultation is open until August 31, 2026, at 23:50. Contributors are asked to identify the relevant section of the strategy, submit a comment or recommendation and explain their reasoning.

Comments can be submitted through the Cyprus government’s e-consultation portal.

Aretilaw firm
Uol
The Future Forbes Realty Global Properties
eCredo

Become a Speaker

Become a Speaker

Become a Partner

Subscribe for our weekly newsletter