[{"data":1,"prerenderedAt":91},["ShallowReactive",2],{"news-\u002Fnews\u002Feu-technical-standard-2024-1774-crypto-updates":3},{"id":4,"title":5,"author":6,"authorTitle":7,"authorUrl":8,"body":9,"canonical":8,"category":43,"date":44,"description":45,"draft":46,"extension":47,"faqs":48,"findingsSource":8,"geo":58,"image":60,"industries":61,"keyFindings":8,"meta":64,"modified":65,"navigation":66,"path":67,"pullquote":8,"recommendations":8,"references":68,"related":72,"seo":79,"seoTitle":80,"signposts":8,"slug":81,"stats":8,"stem":82,"tags":83,"tldr":89,"__hash__":90},"news\u002Fnews\u002Feu-technical-standard-2024-1774-crypto-updates.md","EU Technical Standard 2024\u002F1774 Requires Firms to Update Cryptography as Attacks Advance","ArcQubit Team","",null,{"type":10,"value":11,"toc":39},"minimark",[12,17,24,27,30,33],[13,14,16],"h2",{"id":15},"eu-technical-standard-20241774-requires-crypto-updates-as-attacks-advance","EU technical standard 2024\u002F1774 requires crypto updates as attacks advance",[18,19,20],"p",{},[21,22,23],"strong",{},"13 MARCH 2024, BRUSSELS",[18,25,26],{},"Commission Delegated Regulation (EU) 2024\u002F1774, published on 13 March 2024, sets the technical standards that sit beneath DORA for financial firms. Article 6 requires an encryption policy that covers data at rest, in transit and in use. Article 7 covers key management. The regulation obliges firms to update their cryptography as cryptanalysis develops, so a firm cannot treat its encryption choices as fixed.",[18,28,29],{},"The standard names the quantum threat in recital 9, which signals that quantum sits within the kinds of cryptanalytic developments firms must track. The text stays technology-neutral: it describes outcomes rather than naming algorithms or setting a date, so the obligation remains valid as post-quantum standards mature.",[18,31,32],{},"That design places the judgment with the firm. A financial entity must decide when cryptanalytic progress, including progress toward quantum computers, warrants a cryptographic update, and must be able to show a supervisor the policy behind that decision. The requirement to update as attacks advance makes crypto agility a practical necessity rather than an optional goal.",[18,34,35,38],{},[21,36,37],{},"Why it matters."," The standard turns DORA's general resilience duty into a concrete cryptographic obligation for financial firms. Because it names quantum and requires updates as attacks advance, firms cannot defer the question until a deadline appears. Those that build encryption and key-management policies capable of swapping algorithms will meet the standard more easily than those with hard-coded cryptography.",{"title":7,"searchDepth":40,"depth":40,"links":41},2,[42],{"id":15,"depth":40,"text":16},"Policy","2024-03-13","EU delegated regulation 2024\u002F1774 requires financial firms to update cryptography as cryptanalysis advances, with Articles 6 and 7 on encryption and key management.",false,"md",[49,52,55],{"q":50,"a":51},"What do Articles 6 and 7 require?","Article 6 requires an encryption policy covering data at rest, in transit and in use. Article 7 covers key management. Together they oblige financial firms to protect data cryptographically and to update their cryptography as cryptanalysis develops.",{"q":53,"a":54},"Does the standard name quantum?","Recital 9 names quantum, so the delegated regulation acknowledges the quantum threat without mandating a specific algorithm or date. The text is technology-neutral, requiring firms to keep cryptography current rather than prescribing which algorithms to use.",{"q":56,"a":57},"What does technology-neutral mean here?","The standard sets outcomes, not products. It requires firms to update cryptography as attacks advance, leaving the choice of algorithms to the firm. That approach lets the obligation stay valid as post-quantum standards mature without rewriting the regulation.",[59],"brussels","\u002Fassets\u002Fog-default.png",[62,63],"Financial Services","Cross-Sector",{},"2026-08-20",true,"\u002Fnews\u002Feu-technical-standard-2024-1774-crypto-updates",[69],{"label":70,"url":71},"European Commission, \"Commission Delegated Regulation (EU) 2024\u002F1774,\" Official Journal of the European Union, Mar. 13, 2024.","https:\u002F\u002Feur-lex.europa.eu\u002Feli\u002Freg_del\u002F2024\u002F1774\u002Foj",[73,76],{"label":74,"url":75},"EU DORA Governs Financial Firms' Technology Risk","\u002Fnews\u002Feu-dora-financial-ict-risk-quantum",{"label":77,"url":78},"European Commission Recommendation 2024\u002F1101 Urges Coordinated Migration","\u002Fnews\u002Feu-commission-recommendation-2024-1101-coordinated-migration",{"title":5,"description":45},"EU 2024\u002F1774 Requires Crypto Updates for Firms","eu-technical-standard-2024-1774-crypto-updates","news\u002Feu-technical-standard-2024-1774-crypto-updates",[84,85,86,87,88],"DORA","financial services","crypto-agility","federal compliance","for enterprises","EU delegated regulation 2024\u002F1774 requires financial firms to maintain encryption and key-management policies and update cryptography as cryptanalysis advances, naming quantum in a recital.","T04PFk9FMXId4Ltx5_WGinB6LVV6vNBKoCTbiVgbjXo",1792182887184]