MAS Consults on Measures to Strengthen Cyber Resilience of FIs

These measures, which are already part of the existing MAS Technology Risk Management Guidelines, are aimed at enhancing the security of FIs’ systems and networks as well as mitigating the risk of unauthorized use of system accounts with extensive access privileges. MAS is proposing to stipulate these measures as a baseline hygiene standard for cyber security by elevating them into legally binding requirements. FIs will be required to implement the following six cyber security measures:

• Address system security flaws in a timely manner
• Establish and implement robust security for systems
• Deploy security devices to secure system connections
• Install anti-virus software to mitigate the risk of malware infection
• Restrict the use of system administrator accounts that can modify system configurations
• Strengthen user authentication for system administrator accounts on critical systems

Comment Due Date: October 05, 2018

Keywords: Asia Pacific, Singapore, Banking, Insurance, Securities, Regtech, Cyber Resilience, Cyber Risk, MAS