The scope of the assessment covered the cyber risk supervision and regulation of the financial
sector in France. Thus, the financial supervisory authorities in scope were the Autorité de Contrôle
Prudentiel et de Résolution (ACPR), and Autorité des Marchés Financiers (AMF) and the Banque de
France (BdF). Supervision of Significant Banking Institutions (SIs) in France is within the remit of the
European Central Bank’s Single Supervisory Mechanism (ECB/SSM) and was therefore outside the
scope of the France FSAP.