OSFI issued an advisory on the Technology and Cyber Security Incident Reporting. The advisory sets out the OSFI expectations for federally regulated financial institutions (FRFIs) with respect to the reporting of technology and cyber security incidents affecting FRFI operations. The advisory describes characteristics of incidents that should be reported to OSFI, in addition to the initial notification and subsequent reporting requirements. The advisory comes into effect on March 31, 2019.
In the meantime, FRFIs are expected to continue reporting any major incidents according to previous instructions communicated by their Lead Supervisors. Effective March 31, 2019, this Advisory supersedes any prior instructions for technology and cyber security incident reporting. For the purpose of this Advisory, a technology or cyber security incident is defined to have the potential to, or has been assessed to, materially impact the normal operations of a FRFI, including confidentiality, integrity, or availability of its systems and information. Technology or Cyber Security Incidents assessed by a FRFI to be of a high or critical severity level should be reported to OSFI. FRFIs include banks, trust companies, loan companies, life insurance companies, fraternal benefit societies, and property and casualty insurance companies.
Effective Date: March 31, 2019
Keywords: Americas, Canada, Banking, Insurance, Cyber Risk, Incident Reporting, Advisory, Regtech, OSFI
Previous ArticleEBA Single Rulebook Q&A: Third Update for January 2019
BoE published a statistical notice (Notice 2020/9) explaining the approach for treatment of payment holidays on the profit and loss return or Form PL.
BoE updated the known issues document for the statistical reporting Forms AS and FV.
FED announced individual capital requirements for 34 large banks and these requirements go into effect on October 01, 2020.
SRB published a set of documents to give operational guidance to banks on implementation of the bail-in tool.
BIS published an update on the G20 TechSprint Initiative, which was launched in April 2020 and aims to highlight the potential for technologies to resolve regulatory compliance (regtech) and supervisory (suptech) challenges.
OSFI published a letter that provides an update on the milestones for the implementation of the IFRS 17 standard on insurance contracts.
EBA updated the report on the implementation of selected COVID-19 policies.
The Financial Stability Institute (FSI) of BIS published a brief note that examines the supervisory challenges associated with certain temporary regulatory relief measures introduced by BCBS and prudential authorities in response to the COVID-19 pandemic.
BCBS is consulting on the principles for operational resilience and the revisions to the principles for sound management of operational risk for banks.
BoE updated the reporting template for Form ER as well as the Form ER definitions, which contain guidance on the methodology to be used in calculating annualized interest rates.