Featured Product

    MAS Emphasizes Need to Review Security Controls Amid COVID

    November 10, 2020

    The Cyber Security Advisory Panel (CSAP) of MAS held a meeting in November 2020. At the meeting, the Panel shared insights on cyber risks in the new operating environment and made several recommendations related to the risk profiles of financial institutions and third-party vendors and the use of open-source software. Meanwhile, MAS is also consulting on the requirements to strengthen the identity verification process of financial institutions, with the comment period ending on December 09, 2020. This measure is intended to address the risk of impersonation fraud arising from the theft and misuse of an individual’s personal particulars.

    The MAS Managing Director Ravi Menon, who chaired the meeting, said that the "CSAP members have provided useful recommendations on maintaining cyber security against the backdrop of growing reliance on remote working arrangements and cloud service providers." The following are the key recommendations from the CSAP meeting:

    • Reviewing risk profiles and adequacy of risk mitigating measures. The meeting highlighted the need for financial institutions to assess if their existing risk profiles have changed and remain acceptable. This is to ensure that, in the long run, appropriate controls are implemented to mitigate any new risks.  
    • Maintaining oversight of third-party vendors and their controls. With the increased reliance on third-party vendors, the Panel emphasized the need for financial institutions to step up their oversight of these counterparts and to monitor and secure remote access by third-parties to financial institutions’ systems. This is even more important during the COVID-19 pandemic where remote working has become pervasive.
    • Strengthening governance over the use of open-source software. Vulnerabilities in open-source software are typically targeted and exploited by threat actors. The Panel recommended that financial institutions establish policies and procedures on the use of open-source software and to ensure that the code is robustly reviewed and tested before deployment in the IT environment of financial institutions.

    Over two days of virtual meetings, the Panel also exchanged views with the Association of Banks in Singapore Standing Committee on Cyber Security (SCCS) and the Insurance SCCS on enhancing cloud resiliency, monitoring insider threats, and the role of cyber insurance in risk management. Participants included representatives from government agencies such as the Ministry of Communications and Information, the Ministry of Defense, and the Government Technology Agency.

     

    Comment Due Date: December 09, 2020

    Keywords: Asia Pacific, Singapore, Banking, Securities, Cyber Risk, CSAP, COVID-19, Fintech, Regtech, Open Source Software, Cloud Computing, Third Party Vendors, MAS 

    Related Articles
    News

    ESAs Issue Multiple Regulatory Updates for Financial Sector Entities

    The three European Supervisory Authorities (ESAs) issued a letter to inform about delay in the Sustainable Finance Disclosure Regulation (SFDR) mandate, along with a Call for Evidence on greenwashing practices.

    November 15, 2022 WebPage Regulatory News
    News

    FSB and NGFS Publish Initial Findings from Climate Scenario Analyses

    The Financial Stability Board (FSB) and the Network for Greening the Financial System (NGFS) published a joint report that outlines the initial findings from climate scenario analyses undertaken by financial authorities to assess climate-related financial risks.

    November 15, 2022 WebPage Regulatory News
    News

    FSB Issues Reports on NBFI and Liquidity in Government Bonds

    The Financial Stability Board (FSB) published a letter intended for the G20 leaders, highlighting the work that it will undertake under the Indian G20 Presidency in 2023 to strengthen resilience of the financial system.

    November 14, 2022 WebPage Regulatory News
    News

    ISSB Makes Announcements at COP27; IASB to Propose IFRS 9 Amendments

    The International Sustainability Standards Board (ISSB) of the IFRS Foundations made several announcements at COP27 and with respect to its work on the sustainability standards.

    November 10, 2022 WebPage Regulatory News
    News

    IOSCO Prioritizes Green Disclosures, Greenwashing, and Carbon Markets

    The International Organization for Securities Commissions (IOSCO), at COP27, outlined the regulatory priorities for sustainability disclosures, mitigation of greenwashing, and promotion of integrity in carbon markets.

    November 09, 2022 WebPage Regulatory News
    News

    EBA Finalizes Methodology for Stress Tests, Issues Other Updates

    The European Banking Authority (EBA) issued a statement in the context of COP27, clarified the operationalization of intermediate EU parent undertakings (IPUs) of third-country groups

    November 09, 2022 WebPage Regulatory News
    News

    EU Finalizes Rules Under Crowdfunding Service Providers Regulation

    The European Union has finalized and published, in the Official Journal of the European Union, a set of 13 Delegated and Implementing Regulations applicable to the European crowdfunding service providers.

    November 08, 2022 WebPage Regulatory News
    News

    OSFI Sets Out Work Priorities and Reporting Updates for Banks

    The Office of the Superintendent of Financial Institutions (OSFI) published an annual report on its activities, a report on forward-looking work.

    November 07, 2022 WebPage Regulatory News
    News

    APRA Finalizes Changes to Capital Framework, Issues Other Updates

    The Australian Prudential Regulation Authority (APRA) finalized amendments to the capital framework, announced a review of the prudential framework for groups.

    November 03, 2022 WebPage Regulatory News
    News

    BIS Hub and Central Banks Conduct CBDC and DeFI Pilots

    The Bank for International Settlements (BIS) Innovation Hubs and several central banks are working together on various central bank digital currency (CBDC) pilots.

    November 03, 2022 WebPage Regulatory News
    RESULTS 1 - 10 OF 8596