Regulatory Alerts2026-07-29
Added · Updated
Joint Circular on the Cross-Sectoral Cyber Mapping Exercise
The Hong Kong Monetary Authority, Securities and Futures Commission, Insurance Authority, and Mandatory Provident Fund Schemes Authority advise financial institutions on the outcomes of the first cross-sectoral Cyber Mapping exercise. While no new systemic cyber risks were identified, the exercise revealed that certain third-party service providers, particularly in network infrastructure, cybersecurity solutions, payment processing, and customer communication, warrant increased supervisory attention due to widespread adoption patterns. The Authorities will integrate the Cyber Map into their supervisory work, especially for third-party risk and incident management, and plan to conduct the Cyber Mapping exercise on a recurring basis, with the next iteration expected in 2027/2028.