The guidance sets out expectations on the governance processes, design principles, and operational controls FIs should consider when adopting cloud services.
June 5, 2022New practice note offers guidance on governance, outsourcing, internal controls, technology risk, and business conduct, among other areas.
March 28, 2022Boards, auditors, and regulators will demand that firms level up their incident response playbooks, tools, and platforms.
March 16, 2022NFT and metaverse-related risks, and crypto account hacks and thefts, were cited as top information security risks for the first time.
February 18, 2022DBS has to hold SGD 930 million in additional regulatory capital until MAS is satisfied that it has addressed all shortcomings identified by an independent reviewer.
February 7, 2022The report highlights prioritisation gaps between business executives and security-focused leaders, saying this can leave firms vulnerable to attacks.
January 30, 2022Failure to invest in supply chain risk management could lead to significant consumer harm that might warrant ASIC investigation and action.
December 7, 2021APRA found in a data collection exercise that 60 percent of regulated entities had not assessed IT service providers' information security control testing.
November 25, 2021FinTIP leverages machine algorithms and human experts to correlate, normalise, enrich, and sanitise contributed data to produce "real-time actionable intelligence".
October 4, 2021Lax attitudes towards security by consumers have made it increasingly important for banks to take advantage of digital identity systems and put in place robust security measures.
June 29, 2021