Cyber Risk Regulation and Supervision

Source details

Session No.: CT 25.07
Title: Cyber Risk Regulation and Supervision (CRS)
Deadline passed
Location: Dalian, China
Date: July 21-25, 2025 (1 week)
Delivery Method: In-person Training
Primary Language: English
Target Audience: Financial sector supervisors and regulators with responsibilities that include cyber risk regulation and/or supervision at central banks and agencies charged with supervising financial institutions.
Qualifications: Participants are expected to have at least one year of experience in general regulation and supervision of financial institutions.

Presented by the IMF's Monetary and Capital Markets Department.
Level: introductory to intermediate training for non-specialist financial sector supervisors.
Key thematic components:
- Reviews recent trends in the technology adopted by supervised entities, the evolving threat landscape and their implications for cyber risk and financial stability.
- Outlines the key elements of cyber risk regulations.
- Discusses supervisory approaches and tools.
- Presents key cybersecurity concepts, covering governance, risk assessment, and information sharing, based on international standards and best practices.
Instructional format:
- Sessions will focus on providing practical lessons and tips usable in daily supervisory activities.
- Instructional modalities include group exercises, case studies, and information sharing discussions.

Upon completion, participants should be able to:
- Understand the basics of information technology solutions used in financial institutions, the cyber threat landscape, key characteristics of cyber risk and its place in the enterprise-wide risk management framework.
- Define and summarize the key components of cyber risk regulation and sound approaches to supervising cyber risk.
- Understand the financial stability implications of cyber risk and have an insight on ways to enhance the cyber resilience of the financial sector.