Featured Product

    FSI Note Discusses Official Response to Cyber and ML Risks Amid Crisis

    May 14, 2020

    FSI published a brief note that outlines official response of the authorities worldwide to the increasing risks of cyber-attacks, money laundering (ML), and terrorist financing (TF) amid the pandemic-related lockdowns. Authorities worldwide have responded by providing guidance on ways to improve cyber security and mitigate ML and TF risks. Financial authorities are warning financial institutions to be watchful in relation to their IT networks and non-public data, third-party risk, and cyber-security incident response plans and to focus additional effort on staff training and awareness.

    The note highlights the financial crime seen so far during the current crisis—when 90% of the banking and insurance workers may be working from home—and summarizes official approaches to strengthening the cyber resilience of financial institutions. It also describes the main anti-money laundering (AML) measures taken by selected authorities worldwide. In response to current and emerging cyber threats, the measures taken by regulatory authorities include:

    • Raising awareness through public statements about increasing levels of cyber crime. A few authorities publicly outlined the types of cyber resilience measures undertaken in the context of COVID-19 crisis. An example of this approach is the April 2020 public joint statement by the Bank of Italy and IVASS.
    • Providing guidance on the most relevant cyber resilience areas. Some authorities including New York State Department of Financial Services provided guidance on the heightened risks to IT networks and non-public information. Several authorities are emphasizing staff training and awareness at financial institutions. Incidentally, as part of its 2020 work program, FSB is consulting on a toolkit of effective practices to assist financial institutions before, during and after a cyber incident.
    • Information-sharing on COVID-19-related threats. Some authorities are using existing domestic channels to exchange information on COVID-19-related cyber threats with financial institutions and other trusted counterparts. Organizations, such as the Bank of Italy and IVASS, are using these channels to disseminate security bulletins, organize webinars on attack techniques and possible countermeasures, and facilitate training on the correct use of company devices and the strengthening of controls connected to remote work. At the international level, the Euro Cyber Resilience Board for pan-European Financial Infrastructures and the Cyber Resilience Coordination Center of BIS are expected to play an important role in facilitating the exchange of information on COVID-19-related threats.

    Furthermore, as a result of the crisis, many authorities are prioritizing other prudential areas and, therefore, postponing AML onsite inspections or relying only on off-site monitoring. Some are also delaying AML reporting and other AML regulatory requirements to alleviate the resource pressure on financial institutions. Moreover, a number of jurisdictions have seen an increase in cash withdrawals during the crisis. When the flow of cash goes into reverse as the situation stabilizes, this could provide cover for ML activities. Overall, the note concludes that, in the areas of both cyber and ML/TF risks, the guidance provided by the authorities worldwide underscores the trade-offs between expecting financial institutions to enhance or adjust their cyber resilience and AML frameworks and, on the other hand, avoiding imposing an excessive burden that could hinder financial institutions in delivering key financial services. 


    Related Link: FSI Brief

    Keywords: International, Banking, Insurance, COVID-19, Cyber Risk, AML/CFT, Operational Risk, FSI

    Featured Experts
    Related Articles
    News

    EBA Issues Erratum for Phase 2 Package of Reporting Framework 3.0

    EBA published an erratum for the technical package on phase 2 of the reporting framework 3.0.

    April 08, 2021 WebPage Regulatory News
    News

    EBA Updates Lists of Entities for Use in Capital Calculations under SA

    EBA published an erratum for the technical package on phase 2 of the reporting framework 3.0.

    April 08, 2021 WebPage Regulatory News
    News

    MAS Amends Notice on Related Party Transactions of Banks

    MAS amended Notice 643A that addresses requirements for banks to prepare statements of exposures and credit facilities to related concerns or parties.

    April 08, 2021 WebPage Regulatory News
    News

    ECB Amends Guideline on Euro Short-Term Rate

    ECB has published, in the Official Journal of the European Union, the Guideline 2021/565 on the euro short-term rate (€STR) and this guideline amends the previous ECB Guideline 2019/1265.

    April 07, 2021 WebPage Regulatory News
    News

    EBA Consults on Standards Related to FRTB-SA

    EBA launched a consultation on the draft regulatory technical standards on the list of countries with an advanced economy for calculating the equity risk under the alternative standardized approach (FRTB-SA).

    April 07, 2021 WebPage Regulatory News
    News

    PRA Proposes Rules Related to IRB Approach for Credit Risk

    PRA is proposing, via CP7/21, the approach to implementing new requirements related to the specification of the nature, severity, and duration of an economic downturn in the internal ratings-based (IRB) approach to credit risk.

    April 07, 2021 WebPage Regulatory News
    News

    BoE Outlines Regulatory Treatment of Recovery Loan Scheme of UK

    The UK government launched the Recovery Loan Scheme (RLS) as part of its continued COVID-19 support for UK businesses, as announced by HM Treasury on March 03, 2021.

    April 06, 2021 WebPage Regulatory News
    News

    FSB Addresses G20 on COVID Measures, TBTF Reforms, and Climate Risks

    FSB published a letter, from its Chair Randal K. Quarles, to the G20 Finance Ministers and Central Bank Governors, ahead of their virtual meeting on April 07, 2021.

    April 06, 2021 WebPage Regulatory News
    News

    OSFI Unwinds Temporary Increase to Covered Bond Limit for Banks

    OSFI issued a letter to the deposit-taking institutions issuing covered bonds and announced the unwinding of the temporary increase to the covered bond limit for deposit-taking institutions, effective immediately.

    April 06, 2021 WebPage Regulatory News
    News

    EU Amends CRR and Securitization Regulation in Response to Pandemic

    To support recovery from the COVID-19 crisis, EU has published two regulations to amend the securitization framework, as set out in the Securitization Regulation (2017/2402) and the Capital Requirements Regulation or CRR (575/2013).

    April 06, 2021 WebPage Regulatory News
    RESULTS 1 - 10 OF 6826