Cyber Risk On-Site Examination
Source details
- Canonical URL
- Cyber Risk On-Site Examination
Other formats
Bibliographic details
- Published: October 23, 2020
Overview
- The course is presented by the Monetary and Capital Markets Department and PFTAC.
- Explains key elements of cyber risk and cyber risk management.
- Covers components of good practice cyber risk regulations.
- Teaches how to undertake an assessment of cyber risk on-site at supervised financial institutions.
- Covers effective on-site examination structure and procedure and provides an overview of general financial sector IT risk concepts.
- Includes case studies and hands-on exercises to enhance effectiveness.
- Participants are expected to share their own experiences and views on the assessment of cyber risk and on-site examination practices.
Target audience and qualifications
- Target audience:
- Financial sector supervisors responsible for the on-site examination of cyber risk and information technology (IT) risk from PFTAC member countries and other targeted Asia Pacific region countries, such as Cambodia, Myanmar, and Laos.
- Qualifications:
- Participants are expected to be familiar with on-site examination procedures.
- Participants should have experience undertaking on-site examinations of financial institutions.
- Participants should have a basic knowledge of financial services IT.
Course objectives
Upon completion of the course, participants should be able to:
- Identify key elements of cyber risk that need to be assessed during an on-site examination, and the associated expected management and control framework.
- Identify the components of good practice cyber risk regulations.
- Develop a cyber risk on-site examination scope, timeline, and plan.
- Prepare a cyber risk on-site examination “pre-exam” information request.
- Participate in a cyber risk on-site examination of a supervised institution (with guidance from experienced cyber risk examiners).
Course structure and methods
- Instructional elements:
- Practical case studies.
- Hands-on exercises.
- Guided participation in on-site examination exercises.
- Emphasis on participant interaction and sharing of supervisory experiences.
Follow-up and further training
- The course is to be followed by on-the-job training during actual cyber risk on-site examinations of supervised institutions in PFTAC member countries, with further assistance from the Monetary and Capital Markets Department and PFTAC.
- IMF offers online training to government officials and the public; participants are referred to IMF online training offerings for additional learning opportunities.