## Cyber Risk Regulation and Supervision

## Source details

**Canonical URL:** [Cyber Risk Regulation and Supervision](https://www.imf.org/en/capacity-development/training/icdtc/courses/crs)

## Other formats

- [Markdown version](/en/capacity-development/training/icdtc/courses/crs/index.md)
- [Structured JSON version](/en/capacity-development/training/icdtc/courses/crs/index.json)
- [Bundle manifest](/en/capacity-development/training/icdtc/courses/crs/bundle-manifest.json)

## Bibliographic details
- Published: July 22, 2025

---

## Upcoming offerings

| Start date | End date | Location | Delivery Method | Session No. | Primary & (Interpretation) language | Apply |
| --- | --- | --- | --- | --- | --- | --- |
| August 2, 2027 | August 13, 2027 | Vienna, Austria | [In-person Training](https://www.imf.org/en/capacity-development/training/icdtc/delivery-methods) | [JV 27.25](https://www.imf.org/en/capacity-development/training/icdtc/schedule/jv/2027/crsjv27-25) | English | Nomination |

### Overview
- Course title: Cyber Risk Regulation and Supervision (CRS).
- Level: introductory to intermediate training for non-specialist financial sector supervisors.
- Purpose:
  - Reviews recent trends in the technology adopted by supervised entities, the evolving threat landscape and their implications for cyber risk and financial stability.
  - Outlines the key elements of cyber risk regulations.
  - Discusses supervisory approaches and tools.
  - Presents key cybersecurity concepts, covering governance, risk assessment, and information sharing, based on international standards and best practices.
- Format: instructional and interactive sessions using group exercises, case studies, role plays, and information sharing discussions.

### Target audience and qualifications
- Target Audience:
  - Financial sector supervisors and regulators with responsibilities that include cyber risk regulation and/or supervision at central banks and agencies charged with supervising financial institutions.
- Qualifications:
  - Participants are expected to have at least one year of experience in general regulation and supervision of financial institutions.

### Core content and themes
- Technology, threats, and financial stability:
  - Reviews recent trends in technologies adopted by supervised entities.
  - Examines the evolving threat landscape and their implications for cyber risk and financial stability.
- Cyber risk regulation:
  - Outlines the key elements of cyber risk regulations.
- Supervisory approaches and tools:
  - Discusses supervisory approaches and tools to oversee cyber risk.
- Cybersecurity concepts and standards:
  - Presents governance, risk assessment, and information sharing concepts.
  - Content is based on international standards and best practices.

### Learning objectives
- Upon completion of this course, participants should be able to:
  - Understand the basics of information technology solutions used in financial institutions, the cyber threat landscape, key characteristics of cyber risk and its place in the enterprise-wide risk management framework.
  - Define and summarize the key components of cyber risk regulation and sound approaches to supervising cyber risk.
  - Understand the financial stability implications of cyber risk and have an insight on ways to enhance the cyber resilience of the financial sector.

---


## References

- [In-person Training](https://www.imf.org/en/capacity-development/training/icdtc/delivery-methods)
- [JV 27.25](https://www.imf.org/en/capacity-development/training/icdtc/schedule/jv/2027/crsjv27-25)

_Source: https://www.imf.org/en/capacity-development/training/icdtc/courses/crs_