Regulatory Alerts2024-09-27
Added · Updated
Risk Associated with Third-party IT Solutions
The Circular Issuance and Review (CIR) unit issued this directive on September 27, 2024, to address technology risk management for all authorized institutions. The document mandates the adoption of good practices for managing third-party IT solutions to mitigate associated operational risks. It serves as a regulatory update requiring institutions to enhance their oversight of external technology providers.
CIR
Current
Issue Date:
27 Sep 2024
20241028-8-EN.pdf (169.7 KB)
Topic:
Technology Risk Management - Others
Group:
All Authorized Institutions
Directly related Document
Cross referenced Document
Version History
Superseded Document
Directly related Document
Annex
Current
27 Sep 2024
Annex - Good practices for managing third-party IT solutions
Annex
Current
27 Sep 2024
Annex - Good practices for managing third-party IT solutions
Cross referenced Document
Version History
Superseded Document
You may also be interested in
CIR
Current
16 Apr 2024
Risk management considerations related to the use of distributed ledger technology
CIR
Current
24 Jun 2003
Supervisory Policy Manual ("SPM") TM-G-1: General Principles for Technology Risk Management
CIR
Current
10 Oct 2025
Cross-boundary Data Validation Platform