Cyber Risk Regulation and Supervision

Source details

Target Audience:
- Mid- level to Senior level officials from the central bank, financial sector regulators and supervisory agencies.
- Preference given to those directly working on framing and strengthening cyber risk regulation and/or supervising ICT / cyber risks of banks/FMIs and other financial sector entities.
Qualifications:
- Participants are expected to have at least one-year of experience in general regulation and supervision of financial institutions.
- It is strongly recommended that applicants first complete the Cyber Risk Supervision Online Course (selected participants will be provided with the login information four weeks prior to the course).

Presented by the IMF's Monetary and Capital Markets Department.
Level: Introductory to intermediate training for non-specialist financial sector supervisors.
Course coverage:
- Reviews recent trends in the technology adopted by supervised entities, the evolving threat landscape and their implications for cyber risk and financial stability.
- Outlines the key elements of cyber risk regulations.
- Discusses supervisory approaches and tools.
- Presents key cybersecurity concepts, covering governance, risk assessment, and information sharing, based on international standards and best practices.
Instructional format:
- Practical lessons and tips for regulators and supervisors to use in daily supervisory activities.
- Combination of instructional and interactive sessions through group exercises, case studies and information sharing discussions.

Upon completion, participants should be able to:
- Understand the evolving cyber threat landscape for the financial sector, key characteristics of cyber risk and its place in the enterprise-wide risk management framework.
- Appreciate the international regulatory developments in addressing ICT / cyber risks and define and summarize the key components of cyber risk regulation.
- Discuss and understand sound approaches to supervising cyber risk—both onsite and offsite.
- Understand the financial stability implications of cyber risk and have an insight on ways to enhance the operational resilience and the cyber resilience of the financial sector.