Featured Product

    HKMA Expects Banks to Assess Need for Secure Tertiary Data Backup

    May 18, 2021

    HKMA issued a circular requesting all authorized institutions to critically assess the need for setting up a secure tertiary data backup (STDB) to counter the risk of destructive cyber-attacks. All retail banks and foreign bank branches with significant operations in Hong Kong are expected to submit a report containing the result of their assessment to HKMA by November 30, 2021. HKMA will inform institutions individually if they are required to submit the report and will provide them with details of what information needs to be covered by the report.

    HKMA had invited the Hong Kong Association of Banks (HKAB) to develop guidelines on secure tertiary data backup that are appropriate for the banking landscape in Hong Kong. In response to the HKMA call, HKAB had formed an STDB Taskforce to oversee the development of the guidelines. After extensive consultation with member institutions, HKAB issued the “Secure Tertiary Data Backup Guideline” on April 30, 2021. The STDB Guideline provides guidance to banks on the factors they need to consider in deciding whether to set up an STDB and what implementation issues they need to overcome in ensuring the effectiveness of the STDB. The Guideline covers eight high-level principles grouped under the headings of Governance, Design, and Data Restoration. HKMA considers STDB an effective measure to enhance cyber resilience and data security of authorized institutions in Hong Kong. It expects all authorized institutions to critically assess the need for implementing an STDB having regard to their risk exposure and taking into account the principles stipulated in the HKAB STDB Guideline. For locally incorporated authorized institutions, the assessment report should be endorsed by the board of directors. For foreign bank branches, the assessment should be conducted under the scrutiny of their head office or regional headquarters.

     

    Keywords: Asia Pacific, Hong Kong, Banking, Cyber Risk, Secure Tertiary Data Backup, Operational Resilience, Cyber Resilience, STDB Guideline, HKMA

    Related Articles
    News

    APRA Finalizes Guidance on Management of Climate Change Risks

    The Australian Prudential Regulation Authority (APRA) released the final Prudential Practice Guide on management of climate change financial risks (CPG 229) for banks, insurers, and superannuation trustees.

    November 26, 2021 WebPage Regulatory News
    News

    European Council Adopts Position on Digital Finance Package Proposals

    The European Council adopted its position on two proposals that are part of the digital finance package adopted by the European Commission in September 2020, with one of the proposals involving the regulation on markets in crypto-assets (MiCA) and the other involving the Digital Operational Resilience Act (DORA).

    November 25, 2021 WebPage Regulatory News
    News

    PRA Proposes Rulebook Changes; BoE Extends BEEDS Testing Window

    The Prudential Regulation Authority (PRA) is proposing, via the consultation paper CP21/21, to apply group provisions in the Operational Resilience Part of the PRA Rulebook (relevant for the Capital Requirements Regulation or CRR firms) to holding companies.

    November 25, 2021 WebPage Regulatory News
    News

    EC Proposes New Measures Under Capital Markets Union Package

    The European Commission (EC) has adopted a package of measures related to the Capital Markets Union.

    November 25, 2021 WebPage Regulatory News
    News

    EBA Publishes Standards to Calculate Risk-Weights of CIUs Under CRR

    The European Banking Authority (EBA) published the final report on draft regulatory technical standards for the calculation of risk-weighted exposure amounts of collective investment undertakings or CIUs, in line with the Capital Requirements Regulation (CRR).

    November 24, 2021 WebPage Regulatory News
    News

    FED Outlines Lending Conditions and Supervisory Activities in H1 2021

    The Board of Governors of the Federal Reserve System (FED) published a report that summarizes banking conditions in the United States, along with the supervisory and regulatory activities of FED.

    November 24, 2021 WebPage Regulatory News
    News

    APRA Expects Boards to Strengthen Ability to Oversee Cyber Resilience

    The Australian Prudential Regulation Authority (APRA) recently completed two pilot initiatives in its 2020-2024 Cyber Security Strategy, which was published in November 2020.

    November 23, 2021 WebPage Regulatory News
    News

    FSB Updates List of Global Systemically Important Banks

    The Basel Committee on Banking Supervision (BCBS) published further information related to its 2021 assessment of global systemically important banks (G-SIBs), with additional details to help understand the scoring methodology.

    November 23, 2021 WebPage Regulatory News
    News

    FASB Proposes Improvements to Credit Losses Standard

    The Financial Accounting Standards Board (FASB) is consulting on an Accounting Standards Update and the associated taxonomy improvements for requirements on troubled debt restructurings and vintage disclosures under the credit losses standard (for financial instruments) topic 326.

    November 23, 2021 WebPage Regulatory News
    News

    US Agencies Issue Statement on Crypto-Asset Policy Initiatives

    US Agencies issued a statement that summarizes the work undertaken during the interagency policy sprints focused on crypto-assets and provides a roadmap of future work related to crypto-assets.

    November 23, 2021 WebPage Regulatory News
    RESULTS 1 - 10 OF 7733