IA of Hong Kong Publishes Cyber-Security Guideline for Insurers
IA of Hong Kong published the guideline GL20 on cyber-security for authorized insurers. The guideline sets the minimum standard for cyber-security that authorized insurers are expected to have in place and the general guiding principles which the IA uses in assessing the effectiveness of the cyber-security framework of an insurer. The guideline applies to all authorized insurers, except for captive insurers and marine mutual insurers, in relation to the insurance business they conduct in, or from, Hong Kong. GL20 shall take effect on January 01, 2020.
Cyber risk is one of the most significant operational risks that insurers face, particularly with regard to the business operations they conduct digitally and online. Cyber-security incidents can result in financial loss, business disruption, damage to reputation, and other adverse consequences to an insurer. Accordingly, this guideline requires authorized insurers to put in place resilient cyber-security frameworks to protect their business data and the personal data of their existing or potential policyholders and to ensure continuity of their business operations. The guideline stipulates that authorized insurers should establish and maintain a cyber-security strategy and framework tailored to mitigate relevant cyber risks that are commensurate with the nature, size, and complexity of their business. The cyber-security strategy and framework should be endorsed by the Board of the insurer. Insurers should also develop a cyber-security incident response plan, which covers scenarios of cyber-security incidents and corresponding contingency strategies to maintain and restore critical functions and essential activities in such scenarios.
Related Links
Keywords: Asia Pacific, Hong Kong, Insurance, Cyber Risk, Guideline, Cyber Guidance, IA
Previous Article
FDIC Proposes to Rescind and Remove Regulatory Reporting StandardsRelated Articles
EC Regulation Sets Out Standards for Reporting and Disclosure of MREL
EC published the Implementing Regulation 2021/763 that lays down implementing technical standards for supervisory reporting and public disclosure of the minimum requirement for own funds and eligible liabilities (MREL).
APRA Decides to Standardize Submission Date for Quarterly Reporting
APRA announced the standardization of quarterly reporting due dates for authorized deposit-taking institutions.
ECB Working Group Publishes Recommendations on EURIBOR Fallbacks
The private sector working group of ECB on euro risk-free rates published the recommendations to address events that would trigger fallbacks in the Euro Interbank Offered Rate (EURIBOR)-related contracts, along with the €STR-based EURIBOR fallback rates (rates that could be used if a fallback is triggered).
Bundesbank Publishes Supporting Documentation for Reporting by Banks
Bundesbank published a list of "EntryPoints" that are accepted in its reporting system; the list provides taxonomy version and name of the module against each EntryPoint.
EBA Publishes Phase 1 of Reporting Framework 3.1
EBA published the phase 1 of its reporting framework 3.1, with the technical package covering the new reporting requirements for investment firms (under the implementing technical standards on investment firms reporting).
APRA to Finalize Capital Adequacy Standard Revisions by January 2022
Asia Pacific Australia Banking APS 111 Capital Adequacy Regulatory Capital Basel RBNZ APRA
ESMA Issues Guidelines on Outsourcing to Cloud Service Providers
ESMA published the final guidelines on outsourcing to cloud service providers.
EBA Publishes Data on Deposit Guarantee Schemes
EBA published annual data for two key concepts and indicators in the Deposit Guarantee Schemes (DGS) Directive—available financial means and covered deposits.
OSFI Sets Out Plan for Future Guidance on Managing Technology Risk
OSFI has set out the schedule for release of draft guidance on the management of technology risks by federally regulated financial institutions and private pension plans.
MAS Updates Housing Loan Rules, Proposes Corporate Governance Guidance
MAS updated rules for new housing loans by banks and finance companies.
