2023-12-21

Added 2026-06-21 · Updated 2026-07-10

Managing cyber risk associated with third-party service providers

The Circular Issue Reference (CIR) issued on 21 December 2023 addresses technology risk management and cybersecurity for all authorized institutions. It establishes requirements for managing cyber risks linked to third-party service providers. This directive supersedes previous guidance to ensure robust oversight of external vendor security practices.

Hong Kong

Hong Kong Monetary Authority

Follow HKMA

Show thumbnailShow full textSourceAdd to collection

Show thumbnail