Featured Product

    IMF Paper Discusses Emerging Practices for Supervision of Cyber Risk

    September 24, 2019

    IMF published a paper that discusses the emerging supervisory practices that contribute to effective cyber-security risk supervision. This paper highlights emerging supervisory approaches with the intention of promoting good practices. The focus is on how these practices can be adopted by the agencies that are at an early stage of developing a supervisory approach to strengthen cyber resilience. The paper notes that regulatory requirements ensuring that good cyber-security risk management practices are in place are critical.

    The paper discusses the importance of addressing cyber risk and points out that financial sector supervisory authorities worldwide are working to establish and implement a framework for cyber risk supervision. Progress, however, is uneven, particularly for lower-income countries and lower-capacity supervisors, which face a number of challenges developing an effective regulatory and supervisory framework for cyber risk supervision. The goal of cyber-security risk supervision should be to influence, incentivize, and shape cyber-security capabilities of firms. Supervision activities to build resilience should include the following:

    • Identify the threat landscape
    • Map the cyber and financial network
    • Create coherent regulation
    • Conduct supervisory assessment
    • Establish formal information-sharing and reporting mechanisms
    • Provide adequate response and recovery
    • Ensure preparedness of supervisory agencies

    The experience from IMF technical assistance shows that establishing a framework for cyber-security risk supervision involves many challenges, with the dearth of specialist skills being one of the biggest challenges. Notwithstanding these, all supervisors can take action to build information-gathering and sharing systems, improve basic security practices, and identify and deploy resources toward key assets and carry out basic cyber exercises. The report highlights that the transfer of knowledge across the community of supervisors, especially lower-income and lower-capacity supervisors, will help raise resilience globally. Regulations should leverage established approaches, including those developed by industry, which will help with a convergence of standards. Although all firms face cyber-security risk, smaller- and lower-capacity firms should focus on strengthening cyber hygiene while the largest and most globally connected firms and key system nodes should be subject to heightened standards.

    The report notes that authorities should work together to promote a more consistent and coordinated approach that promotes consistency and convergence. A strong regulatory and supervisory framework should allow supervisors to substantially improve the resilience of financial sector to cyber attack. Whether the regulatory framework is based on principles or rules, the framework must grant supervisors sufficient authority to address cyber-security risk and allow supervisors to be sufficiently adaptive to the dynamics of the risk. 

     

    Related Link: Report on Cyber Risk Supervision

     

    Keywords: International, Banking, Insurance, Securities, Cyber Risk, Cyber Resilience Framework, Supervisory Practices, Operational Risk, IMF

    Related Articles
    News

    EC Delegated Regulation on Specialized Lending Exposures Under CRR

    EC finalized the Delegated Regulation 2021/598 that supplements the Capital Requirements Regulation (CRR or 575/2013) and lays out the regulatory technical standards for assigning risk-weights to specialized lending exposures.

    April 14, 2021 WebPage Regulatory News
    News

    OSFI Consults on Minimum Qualifying Rate for Uninsured Mortgages

    OSFI is proposing new minimum qualifying rate for uninsured mortgages under the Guideline B-20.

    April 13, 2021 WebPage Regulatory News
    News

    ECB Updates List of Supervised Entities in EU in April 2021

    ECB updated the list of supervised entities in EU, with the number of significant supervised entities amounting to 115 as of the March 01, 2021 cut-off date.

    April 12, 2021 WebPage Regulatory News
    News

    OSFI Issues Letter on ICAAP Submission and Internal Audit of BCAR

    OSFI issued a letter to confirm that a formal Internal Capital Adequacy Assessment Process (ICAAP) submission is not required in 2021.

    April 12, 2021 WebPage Regulatory News
    News

    EC Agrees to Prolong Scheme to Support NPL Reduction at Greek Banks

    EC has approved the prolongation of an existing Greek scheme aiming to support the reduction of nonperforming loans, or NPLs, of Greek banks on the basis that it remains free of any State aid.

    April 09, 2021 WebPage Regulatory News
    News

    EIOPA Study Examines Internal Model Market and Credit Risks Under SII

    EIOPA published a report presenting the results of its yearly study on the internal modeling of market and credit risks under the Solvency II Directive, also known as SII.

    April 09, 2021 WebPage Regulatory News
    News

    ESMA Issues Notification Templates for STS Synthetic Securitizations

    ESMA published the interim simple, transparent, and standardized (STS) notification templates for synthetic securitizations, post the recent amendments to the Securitization Regulation.

    April 09, 2021 WebPage Regulatory News
    News

    EBA Issues Erratum for Phase 2 Package of Reporting Framework 3.0

    EBA published an erratum for the technical package on phase 2 of the reporting framework 3.0.

    April 08, 2021 WebPage Regulatory News
    News

    EBA Updates Lists of Entities for Use in Capital Calculations under SA

    EBA published an erratum for the technical package on phase 2 of the reporting framework 3.0.

    April 08, 2021 WebPage Regulatory News
    News

    FED Proposes to Automate Bank Stock Adjustment Using Call Report Data

    FED published a proposal to automate non-merger-related adjustments to member banks' subscriptions to Federal Reserve Bank capital stock.

    April 08, 2021 WebPage Regulatory News
    RESULTS 1 - 10 OF 6835