October 13, 2017

FSB published the results of a stocktake on cybersecurity regulations, guidance, and supervisory practices. FSB published two reports: a summary report and a detailed analysis of the results of the stocktake. The reports are informed by the responses of FSB member jurisdictions and international bodies to a survey conducted by FSB. The summary report also sets out key themes raised in an FSB workshop in September that brought together public and private sector participants to discuss cybersecurity in the financial sector.

The stocktake had been delivered to this week’s meeting of G20 Finance Ministers and Central Bank Governors in Washington DC. To enhance cross-border cooperation, the G20, at its March 2017 meeting in Baden-Baden, had asked FSB, as a first step, to perform the stocktake. FSB member jurisdictions have been active in addressing cybersecurity, with all member jurisdictions having released regulations or guidance that address cybersecurity for the financial sector. Findings of the FSB stocktake include:

  • All FSB member jurisdictions report drawing on a small body of previously developed national or international guidance or standards when developing their own regulatory or supervisory schemes for the financial sector.
  • Two-third of the reported regulatory schemes take a targeted approach to cybersecurity and/or information technology risk and one-third address operational risk generally.
  • Some elements commonly covered by regulatory schemes targeted to cybersecurity include risk assessment, regulatory reporting, role of the board, third-party interconnections, system access controls, incident recovery, testing, and training.
  • Jurisdictions remain active in further developing their regulation and guidance. Seventy-two percent of jurisdictions report plans to issue new regulations, guidance, or supervisory practices that address cybersecurity for the financial sector within the next year.
  • International bodies also have been active in addressing cybersecurity for the financial sector. There are a number of similarities across the international guidance issued by different sectoral standard-setting bodies and other international organizations. Many of the same topics are addressed, including governance, risk analysis and assessment, information security, expertise and training, incident response and recovery, communications and information sharing, and oversight of interconnections.

 

Related Links (PDFs)

Keywords: International, Banking, Cyber Risk, Cybersecurity Regulations, Fintech, FSB


Related Articles
News

FSB to Evaluate Effects of Too-Big-To-Fail Reforms for Systemic Banks

FSB is seeking feedback as part of its evaluation of the effects of the too-big-to-fail reforms for banks.

May 23, 2019 WebPage Regulatory News
News

APRA Releases Minor Changes to Reporting Standards on SA-CCR for Banks

APRA released minor changes to the three reporting standards for the standardized approach for measuring counterparty credit risk exposures (SA-CCR).

May 22, 2019 WebPage Regulatory News
News

APRA on Industry Self-Assessments into Governance and Accountability

APRA released an information paper analyzing the self-assessments performed by 36 of the country’s largest banks, insurers, and superannuation licensees in response to the final report on the Prudential Inquiry into the Commonwealth Bank of Australia (CBA).

May 22, 2019 WebPage Regulatory News
News

PRA Consults on Maintenance of TMTP Under Solvency II

PRA published a consultation paper (CP11/19) that sets out its approach to update supervisory statement (SS6/16) on maintenance of the transitional measure on technical provisions (TMTP) under Solvency II.

May 22, 2019 WebPage Regulatory News
News

APRA Proposes to Amend Guidance on Residential Mortgage Lending

APRA is consulting on revisions to the prudential practice guide APG 223 on residential mortgage lending in Australia.

May 21, 2019 WebPage Regulatory News
News

IASB Proposes Improvements to IFRS 9 and IFRS 16

IASB published the exposure draft ED 2019/2 that proposes amendments to four IFRS standards, including IFRS 9 on Financial Instruments and IFRS 16 on Leases.

May 21, 2019 WebPage Regulatory News
News

Denis Beau of BDF on Supervisory Priorities for Climate-Change Risks

Denis Beau, the First Deputy Governor of BDF, delivered opening remarks at the BCBS-BSCEE-FSI High-level Meeting for Europe on banking supervision.

May 21, 2019 WebPage Regulatory News
News

ISDA CDM to be Deployed for UK Digital Regulatory Reporting Pilot

ISDA announced deployment of the ISDA Common Domain Model (ISDA CDM 2.0) to support the UK FCA, BoE, and participating financial institutions in testing phase two of the Digital Regulatory Reporting pilot for derivatives.

May 21, 2019 WebPage Regulatory News
News

MAS to Consolidate Regulation of Merchant Banks Under Banking Act

MAS published a consultation paper that proposes to consolidate the regulation of merchant banks under the Banking Act and to move merchant banks to a licensing regime under the MAS Act.

May 21, 2019 WebPage Regulatory News
News

ESAs Amend Technical Standards on Mapping of ECAIs Under CRR

ESAs published a second amendment to the implementing technical standards on the mapping of credit assessments of External Credit Assessment Institutions (ECAIs) for credit risk under the Capital Requirements Regulation (CRR).

May 20, 2019 WebPage Regulatory News
RESULTS 1 - 10 OF 3118