Regulatory Alerts2026-04-01
Added · Updated
Good practices for addressing vulnerabilities related to operational resilience
The Hong Kong Monetary Authority issued this letter to provide Authorized Institutions with practical risk management practices for addressing operational resilience vulnerabilities ahead of the 31 May 2026 deadline. The guidance outlines specific enhancements for ICT risk management, cyber security, third-party dependency management, and business continuity planning to eliminate single points of failure and narrow recovery timelines. Following the implementation deadline, the regulator will shift its supervisory focus to supporting institutions in sustaining and continually uplifting their operational resilience posture.
More like this from HKMA
HKMA published 11 documents in the last 30 days. We email you each new one the day it's published.