OSFI issued an advisory on the Technology and Cyber Security Incident Reporting. The advisory sets out the OSFI expectations for federally regulated financial institutions (FRFIs) with respect to the reporting of technology and cyber security incidents affecting FRFI operations. The advisory describes characteristics of incidents that should be reported to OSFI, in addition to the initial notification and subsequent reporting requirements. The advisory comes into effect on March 31, 2019.
In the meantime, FRFIs are expected to continue reporting any major incidents according to previous instructions communicated by their Lead Supervisors. Effective March 31, 2019, this Advisory supersedes any prior instructions for technology and cyber security incident reporting. For the purpose of this Advisory, a technology or cyber security incident is defined to have the potential to, or has been assessed to, materially impact the normal operations of a FRFI, including confidentiality, integrity, or availability of its systems and information. Technology or Cyber Security Incidents assessed by a FRFI to be of a high or critical severity level should be reported to OSFI. FRFIs include banks, trust companies, loan companies, life insurance companies, fraternal benefit societies, and property and casualty insurance companies.
Effective Date: March 31, 2019
Keywords: Americas, Canada, Banking, Insurance, Cyber Risk, Incident Reporting, Advisory, Regtech, OSFI
Previous ArticleEBA Single Rulebook Q&A: Third Update for January 2019
EBA published an erratum for the technical package on phase 2 of the reporting framework 3.0.
MAS amended Notice 643A that addresses requirements for banks to prepare statements of exposures and credit facilities to related concerns or parties.
ECB has published, in the Official Journal of the European Union, the Guideline 2021/565 on the euro short-term rate (€STR) and this guideline amends the previous ECB Guideline 2019/1265.
EBA launched a consultation on the draft regulatory technical standards on the list of countries with an advanced economy for calculating the equity risk under the alternative standardized approach (FRTB-SA).
PRA is proposing, via CP7/21, the approach to implementing new requirements related to the specification of the nature, severity, and duration of an economic downturn in the internal ratings-based (IRB) approach to credit risk.
The UK government launched the Recovery Loan Scheme (RLS) as part of its continued COVID-19 support for UK businesses, as announced by HM Treasury on March 03, 2021.
FSB published a letter, from its Chair Randal K. Quarles, to the G20 Finance Ministers and Central Bank Governors, ahead of their virtual meeting on April 07, 2021.
OSFI issued a letter to the deposit-taking institutions issuing covered bonds and announced the unwinding of the temporary increase to the covered bond limit for deposit-taking institutions, effective immediately.
To support recovery from the COVID-19 crisis, EU has published two regulations to amend the securitization framework, as set out in the Securitization Regulation (2017/2402) and the Capital Requirements Regulation or CRR (575/2013).
HM Treasury announced that G7 Finance Ministers and Central Bank Governors met ahead of COP 26, the 2021 UN Climate Change Conference, and agreed on green agenda.