{
  "title": "Cyber Risk On-Site Examination",
  "sourceUrl": "https://www.imf.org/en/capacity-development/training/icdtc/courses/cre",
  "canonical": "https://www.imf.org/en/capacity-development/training/icdtc/courses/cre",
  "overlayPath": "/en/capacity-development/training/icdtc/courses/cre/index.md",
  "summary": "The course also covers effective on-site examination structure and procedure and provides an overview of general financial sector IT risk concepts.",
  "publishDate": "2020-10-23",
  "sections": [
    {
      "heading": "Overview",
      "content": "- The course is presented by the Monetary and Capital Markets Department and PFTAC.\n- Explains key elements of cyber risk and cyber risk management.\n- Covers components of good practice cyber risk regulations.\n- Teaches how to undertake an assessment of cyber risk on-site at supervised financial institutions.\n- Covers effective on-site examination structure and procedure and provides an overview of general financial sector IT risk concepts.\n- Includes case studies and hands-on exercises to enhance effectiveness.\n- Participants are expected to share their own experiences and views on the assessment of cyber risk and on-site examination practices."
    },
    {
      "heading": "Target audience and qualifications",
      "content": "- Target audience:\n  - Financial sector supervisors responsible for the on-site examination of cyber risk and information technology (IT) risk from PFTAC member countries and other targeted Asia Pacific region countries, such as Cambodia, Myanmar, and Laos.\n- Qualifications:\n  - Participants are expected to be familiar with on-site examination procedures.\n  - Participants should have experience undertaking on-site examinations of financial institutions.\n  - Participants should have a basic knowledge of financial services IT."
    },
    {
      "heading": "Course objectives",
      "content": "Upon completion of the course, participants should be able to:\n- Identify key elements of cyber risk that need to be assessed during an on-site examination, and the associated expected management and control framework.\n- Identify the components of good practice cyber risk regulations.\n- Develop a cyber risk on-site examination scope, timeline, and plan.\n- Prepare a cyber risk on-site examination “pre-exam” information request.\n- Participate in a cyber risk on-site examination of a supervised institution (with guidance from experienced cyber risk examiners)."
    },
    {
      "heading": "Course structure and methods",
      "content": "- Instructional elements:\n  - Practical case studies.\n  - Hands-on exercises.\n  - Guided participation in on-site examination exercises.\n- Emphasis on participant interaction and sharing of supervisory experiences."
    },
    {
      "heading": "Follow-up and further training",
      "content": "- The course is to be followed by on-the-job training during actual cyber risk on-site examinations of supervised institutions in PFTAC member countries, with further assistance from the Monetary and Capital Markets Department and PFTAC.\n- IMF offers online training to government officials and the public; participants are referred to IMF online training offerings for additional learning opportunities."
    }
  ],
  "bullets": [
    "The course is presented by the Monetary and Capital Markets Department and PFTAC.",
    "Explains key elements of cyber risk and cyber risk management.",
    "Covers components of good practice cyber risk regulations.",
    "Teaches how to undertake an assessment of cyber risk on-site at supervised financial institutions.",
    "Covers effective on-site examination structure and procedure and provides an overview of general financial sector IT risk concepts.",
    "Includes case studies and hands-on exercises to enhance effectiveness.",
    "Participants are expected to share their own experiences and views on the assessment of cyber risk and on-site examination practices.",
    "Target audience:",
    "Qualifications:",
    "Identify key elements of cyber risk that need to be assessed during an on-site examination, and the associated expected management and control framework.",
    "Identify the components of good practice cyber risk regulations.",
    "Develop a cyber risk on-site examination scope, timeline, and plan.",
    "Prepare a cyber risk on-site examination “pre-exam” information request.",
    "Participate in a cyber risk on-site examination of a supervised institution (with guidance from experienced cyber risk examiners).",
    "Instructional elements:",
    "Emphasis on participant interaction and sharing of supervisory experiences.",
    "The course is to be followed by on-the-job training during actual cyber risk on-site examinations of supervised institutions in PFTAC member countries, with further assistance from the Monetary and Capital Markets Department and PFTAC.",
    "IMF offers online training to government officials and the public; participants are referred to IMF online training offerings for additional learning opportunities."
  ],
  "alternates": {
    "markdown": "/en/capacity-development/training/icdtc/courses/cre/index.md",
    "json": "/en/capacity-development/training/icdtc/courses/cre/index.json",
    "bundleManifest": "/en/capacity-development/training/icdtc/courses/cre/bundle-manifest.json"
  },
  "generatedAtUtc": "2026-09-29T16:34:48.049Z"
}