2026-06-01

Added · Updated

Operational Resilience: Sustaining and Uplifting

The regulator issued this circular to guide all authorized institutions on sustaining and uplifting operational resilience frameworks. The document emphasizes the importance of robust business continuity planning, internal controls for insourcing and outsourcing, and comprehensive technology risk management including cybersecurity. It serves as a directive to ensure financial institutions maintain high standards of operational stability and risk mitigation.

Hong Kong Monetary Authority logo

Hong Kong

Hong Kong Monetary Authority

Click to view thumbnail

CIR

Current

Issue Date:

01 Jun 2026

20260529-5-EN.pdf (193.5 KB)

Topic:

Business Continuity Planning

Internal Controls - Insourcing/Outsourcing

Operational Risk Management - Others

Technology Risk Management - Cybersecurity

Technology Risk Management - Others

Group:

All Authorized Institutions

Directly related Document

Cross referenced Document

Version History

Superseded Document

Directly related Document

CIR

Current

01 Apr 2026

Good practices for addressing vulnerabilities related to operational resilience

CIR

Current

20 Jan 2025

Sharing of good industry practices for implementing operational resilience framework

SPM-SGL

Current

29 Nov 2024

TM-C-1 Supervisory Approach on Cyber Risk Management

Directly related Document

CIR

Current

01 Apr 2026

Good practices for addressing vulnerabilities related to operational resilience

CIR

Current

20 Jan 2025

Sharing of good industry practices for implementing operational resilience framework

SPM-SGL

Current

29 Nov 2024

TM-C-1 Supervisory Approach on Cyber Risk Management

Version History

Superseded Document

You may also be interested in

CIR

Current

24 May 2016

Cybersecurity Fortification Initiative

CIR

Archive

31 Aug 2022

Guidance on Cloud Computing

CIR

Archive

31 Aug 2022

Guidance on Cloud Computing

Annex: Guidance on Cloud Computing