Regulatory Alerts2024-05-09
Added · Updated
MAS Notice FSM-N05 Technology Risk Management
This Notice requires banks in Singapore to establish frameworks for identifying critical systems and maintaining high availability, limiting maximum unscheduled downtime to 4 hours within any 12-month period. Banks must set a recovery time objective of no more than 4 hours for each critical system and validate recovery testing annually. Upon discovering a relevant incident, banks must notify the Authority within 1 hour and submit a root cause and impact analysis report within 14 days. Additionally, banks must implement IT controls to protect customer information from unauthorized access or disclosure.
More like this from MAS
We email you every new MAS publication the day it's published.
Topics
Share