MFSA Releases a Cross-Sectoral Self-Assessment Questionnaire on ICT and Cybersecurity Risks Management for Trustees and Other Fiduciaries

Circular Triq l-Imdina, Zone 1 Central Business District, Birkirkara CBD 1010 +356 2144 1155 communications@mfsa.mt www.mfsa.mt MFSA Releases a Cross-Sectoral Self-Assessment Questionnaire on ICT and Cybersecurity Risks Management Following the release of the Guidance on Technology Arrangements, ICT and Security Risk Management, and Outsourcing Arrangements, and in line with the MFSA Supervisory Priorities for 2021, the Supervisory ICT Risk and Cybersecurity function of the MFSA is carrying out a cross-sectoral thematic desk-based review on ICT and Cybersecurity Risks Management. A self-assessment questionnaire covering the following sections is being released and will be distributed to the respective Licence Holders in phases:

1. ICT Governance and Strategy
2. ICT and Security Risk Management
3. Information Security
4. ICT Operations Management
5. Business Continuity Management
6. ICT Project and Change Management
7. ICT Systems Acquisition and Development
8. ICT Outsourcing Arrangements Licence Holders will be receiving instructions to complete and submit their self-assessment questionnaire via an email addressed to the Compliance Officer. Submission of the self-assessment questionnaire by Licence Holders is mandatory and is required to be carried out within two (2) months from receipt of the email. Licence Holders may request further information or clarifications by sending an email to the Supervisory ICT Risk and Cybersecurity function within MFSA on sirc@mfsa.mt. 29 July 2021