OSFI Sets Out Plan for Future Guidance on Managing Technology Risk
OSFI has set out the schedule for release of draft guidance on the management of technology risks by federally regulated financial institutions and private pension plans. This follows an OSFI discussion paper on a range of technology risk areas such as cyber security, advanced analytics, and third-party technology ecosystem. The feedback period on the paper ended on December 15, 2020, with respondents expressing broad support for emerging principles-based and technology-neutral perspectives on technology risk management.
In the feedback, the respondents indicated that OSFI should first leverage its existing guidance and align any additional guidance with existing international and information technology standards. In light of the feedback received on the discussion paper, OSFI plans to release draft guidance and industry letters as per the following schedule:
- OSFI plans to publish an industry letter on operational resilience and a new draft guideline on technology and cyber risk in the third and fourth quarters of 2021, respectively.
- In the first quarter of 2022, OSFI plans to publish a draft of the revised guideline on third-party risk and an industry letter on advanced analytics and model risk.
- In 2022-23, OSFI plans to publish the revised Guideline E-21 on operational risk management and the revised guidance on model risk.
Related Links
Keywords: Americas, Canada, Banking, Insurance, Technology Risk, Operational Risk, Operational Resilience, Third-Party Risk, Cyber Risk, Regtech, OSFI
Next Article
EBA Publishes Phase 1 of Reporting Framework 3.1Related Articles
EBA Clarifies Use of COVID-19-Impacted Data for IRB Credit Risk Models
The European Banking Authority (EBA) published four draft principles to support supervisory efforts in assessing the representativeness of COVID-19-impacted data for banks using the internal ratings based (IRB) credit risk models.
BIS Hub Updates Work Program for 2022, Announces New Projects
The Bank for International Settlements (BIS) Innovation Hub updated its work program, announcing a set of projects across various centers.
US Senate Members Seek Details on SEC Proposed Climate Disclosure Rule
Certain members of the U.S. Senate Committee on Banking, Housing, and Urban Affairs issued a letter to the Securities and Exchange Commission (SEC)
EIOPA Consults on Review of Securitization Framework in Solvency II
The European Insurance and Occupational Pensions Authority (EIOPA) published a consultation paper on the advice on the review of the securitization prudential framework in Solvency II.
UK Authorities Issue Regulatory and Reporting Updates for Banks
The Prudential Regulation Authority (PRA) issued a statement on PRA buffer adjustment while the Bank of England (BoE) published a notice on the statistical reporting requirements for banks.
BaFin Consults on Resolvability Requirements for Resolution Planning
The Federal Financial Supervisory Authority of Germany (BaFin) proposed to amend the “Capital Investment Conduct And Organization Ordinance” and issued a draft circular on the minimum resolvability requirements for resolution planning.
EBA Consults on Certain Standards and Guidelines Under CRR and BRRD
The European Banking Authority (EBA) proposed guidelines, for the resolution authorities, on the publication of the write-down and conversion and bail-in exchange mechanic, with the comment period ending on September 07, 2022.
OJK Publishes Regulatory Updates for Financial Sector Entities
The Financial Services Authority of Indonesia (OJK) is strengthening cooperation with the Australian Prudential Regulation Authority (APRA) and the Japanese Financial Services Agency (JFSA)
EU Publishes Rules on DLT and Data Governance
The European Parliament and the Council published Regulation 2022/868 on European data governance (Data Governance Act).
EBA Publishes Phase 2 of Reporting Framework 3.2
The European Banking Authority (EBA) published phase 2 of its reporting framework 3.2. The technical package supports the implementation of the updated reporting framework by providing standard specifications
