2024-11-29

Added · Updated

Supervisory Approach on Cyber Risk Management

The Hong Kong Monetary Authority issued Supervisory Policy Manual module TM-C-1 to establish a supervisory approach for cyber risk management. This policy applies to all authorized institutions and outlines expectations for technology risk management and cybersecurity governance. It supersedes previous circulars and aligns with broader operational resilience and outsourcing standards.

Hong Kong Monetary Authority logo

Hong Kong

Hong Kong Monetary Authority

Click to view thumbnail

SPM-SGL

Current

Issue Date:

29 Nov 2024

TM-C-1.pdf (318.9 KB)

Topic:

Technology Risk Management - Cybersecurity

Keyword:

Group:

All Authorized Institutions

Directly related Document

Cross referenced Document

Version History

Superseded Document

Directly related Document

CIR

Current

29 Nov 2024

New Supervisory Policy Manual (SPM) Module TM-C-1 on “Supervisory Approach on Cyber Risk Management”

SPM

Current

10 Apr 2025

GL Glossary

SPM

Current

17 Jan 2025

IN Introduction

SPM-SGL

Current

25 Oct 2024

TM-E-1 Risk Management of E-banking

SPM-NGL

Current

31 May 2022

OR-2 Operational Resilience

SPM-SGL

Current

06 Oct 2017

IC-1 Risk Management Framework

SPM-NGL

Current

24 Jun 2003

TM-G-1 General principles for technology risk management

SPM-NGL

Current

28 Dec 2001

SA-2 Outsourcing

CIR

Archive

15 Sep 2015

Cyber Security Risk Management

CIR

Current

29 Nov 2024

New Supervisory Policy Manual (SPM) Module TM-C-1 on “Supervisory Approach on Cyber Risk Management”

SPM

Current

10 Apr 2025

GL Glossary

SPM

Current

17 Jan 2025

IN Introduction

SPM-SGL

Current

25 Oct 2024

TM-E-1 Risk Management of E-banking

SPM-NGL

Current

31 May 2022

OR-2 Operational Resilience

SPM-SGL

Current

06 Oct 2017

IC-1 Risk Management Framework

SPM-NGL

Current

24 Jun 2003

TM-G-1 General principles for technology risk management

SPM-NGL

Current

28 Dec 2001

SA-2 Outsourcing

Version History

CIR

Archive

15 Sep 2015

Cyber Security Risk Management