2023-07-31
The Reserve Bank of New Zealand and the Financial Markets Authority jointly issued Standard 17C to mandate cyber resilience for designated Financial Market Infrastructures. Operators must establish comprehensive cyber resilience strategies and frameworks aligned with international guidelines, while ensuring board-level governance and defined risk appetites. Compliance requires external assurance audits by qualified auditors at least every two years and upon material cyber incidents, with reports submitted to regulators upon request.