Informs financial institutions that MAS Circular SRD TR01/2011 on Information Technology Outsourcing has been superseded and cancelled by the Guidelines on Outsourcing dated 27 July 2016.

Sets out MAS’ expectations on financial institutions to have in place a comprehensive technology risk and cybersecurity training programme for their board of directors and senior management.

Reminder to all financial institutions to be cognisant of the heightened security risks associated with the Bring Your Own Device (BYOD) practice.

Guidance to all financial institutions on system vulnerability assessments and penetration testing to check whether systems and data are well protected against any breach or loss.

Informs all financial institutions of the circulars that have been superseded and cancelled by the Technology Risk Management Guidelines dated 21 June 2013.

Helps financial institutions evaluate their controls and processes against the relevant sections in the Technology Risk Management Guidelines.

Template for financial institutions to report incidents to MAS, including incidents relating to IT systems, cyber security, information loss and liquidity.

Frequently asked questions about the notice on Technology Risk Management.

Provides guidance to financial institutions on the notification and reporting of incidents to MAS as required under the Notice on Technology Risk Management.

Consultation number:

P013 - 2012

Start date:

13 June 2012

Closing date:

16 July 2012

MAS response date:

13 June 2012