IMF Staff Country Reports

This paper explores a technical note on cyber risk and financial stability as part of Financial Sector Assessment Program (FSAP) in Spain. Technology risk and cyber resilience of the financial sector has become a focus area of the authorities, within the broader context of operational risk and resilience. This intensified focus by authorities is timely and important from the perspective of the continuity of financial service provision and the stability of the Spanish financial system. The FSAP found cyber risk supervisory practices of the authorities with regard to less significant institutions and financial market infrastructures in scope to be materially in line with applicable regulations and guidance and prevailing international good practice. Resource constraints are the most prominent challenge that the authorities are confronted with. A number of further weaknesses have a negative impact notwithstanding the overall strength of cyber risk supervision.