2022-07-31

Technology and Cyber Risk Management

The Office of the Superintendent of Financial Institutions (OSFI) issued Guideline B-13 to establish comprehensive expectations for technology and cyber risk management across all federally regulated financial institutions. The framework mandates clear senior leadership accountability, robust governance structures, and a risk-based approach to ensure stable technology operations and secure cyber postures. Institutions must implement integrated strategies covering asset management, system development, change control, incident response, and disaster recovery to maintain operational resilience against evolving digital threats.

Office of the Superintendent of Financial Institutions logo

Canada

Office of the Superintendent of Financial Institutions

Click to view full text