## Cyber Risk On-Site Examination

## Source details

**Canonical URL:** [Cyber Risk On-Site Examination](https://www.imf.org/en/capacity-development/training/icdtc/courses/cre)

## Other formats

- [Markdown version](/en/capacity-development/training/icdtc/courses/cre/index.md)
- [Structured JSON version](/en/capacity-development/training/icdtc/courses/cre/index.json)
- [Bundle manifest](/en/capacity-development/training/icdtc/courses/cre/bundle-manifest.json)

## Bibliographic details
- Published: October 23, 2020

---

### Overview
- The course is presented by the Monetary and Capital Markets Department and PFTAC.
- Explains key elements of cyber risk and cyber risk management.
- Covers components of good practice cyber risk regulations.
- Teaches how to undertake an assessment of cyber risk on-site at supervised financial institutions.
- Covers effective on-site examination structure and procedure and provides an overview of general financial sector IT risk concepts.
- Includes case studies and hands-on exercises to enhance effectiveness.
- Participants are expected to share their own experiences and views on the assessment of cyber risk and on-site examination practices.

### Target audience and qualifications
- Target audience:
  - Financial sector supervisors responsible for the on-site examination of cyber risk and information technology (IT) risk from PFTAC member countries and other targeted Asia Pacific region countries, such as Cambodia, Myanmar, and Laos.
- Qualifications:
  - Participants are expected to be familiar with on-site examination procedures.
  - Participants should have experience undertaking on-site examinations of financial institutions.
  - Participants should have a basic knowledge of financial services IT.

### Course objectives
Upon completion of the course, participants should be able to:
- Identify key elements of cyber risk that need to be assessed during an on-site examination, and the associated expected management and control framework.
- Identify the components of good practice cyber risk regulations.
- Develop a cyber risk on-site examination scope, timeline, and plan.
- Prepare a cyber risk on-site examination “pre-exam” information request.
- Participate in a cyber risk on-site examination of a supervised institution (with guidance from experienced cyber risk examiners).

### Course structure and methods
- Instructional elements:
  - Practical case studies.
  - Hands-on exercises.
  - Guided participation in on-site examination exercises.
- Emphasis on participant interaction and sharing of supervisory experiences.

### Follow-up and further training
- The course is to be followed by on-the-job training during actual cyber risk on-site examinations of supervised institutions in PFTAC member countries, with further assistance from the Monetary and Capital Markets Department and PFTAC.
- IMF offers online training to government officials and the public; participants are referred to IMF online training offerings for additional learning opportunities.

---


## References

- [Core Elements of Banking Supervision (CBS)](https://www.imf.org/en/capacity-development/training/icdtc/schedule/at/2027/cbsat27-10)
- [Advanced Government Finance Statistics (GFS-A)](https://www.imf.org/en/capacity-development/training/icdtc/schedule/ce/2026/gfs-ace26-45)
- [Fiscal Sustainability (FS)](https://www.imf.org/en/capacity-development/training/icdtc/schedule/ce/2026/fsce26-38)
- [Safeguards Assessments of Central Banks (SAC)](https://www.imf.org/en/capacity-development/training/icdtc/schedule/at/2026/sacat26-30)
- [Macroeconomic Management in Resource Rich Countries (MRC)](https://www.imf.org/en/capacity-development/training/icdtc/schedule/ce/2026/mrcce26-44)

_Source: https://www.imf.org/en/capacity-development/training/icdtc/courses/cre_