ABS revamps cloud outsourcing guide for banks

One revision guides the categorisation of material and non-material cloud outsourcing contracts.

The Association of Banks in Singapore (ABS) has updated the Cloud Computing Implementation Guide to take account for technological advancements and market practice evolutions.

First published in 2016, financial institutions (FIs) are required to adopt the guide when they enter into cloud outsourcing arrangements.

Revisions reportedly include key characteristics to guide the categorisation of material and non-material cloud outsourcing arrangements; enhanced guidance for due diligence assessment on cloud service providers (CSPs), which are in line with the ABS Guidelines on Control Objectives and Procedures for Outsourced Service Providers (OSPs) as well as the OSP Audit Report (OSPAR); approaches and considerations for governing, designing, securing and running the cloud; and finally, comprehensive considerations and controls specifically for securing material versus standard workloads, including considerations for critical workloads.

According to the ABS, the revised guide is the result of 18 months of research and three months of cross industry consultation with CSPs, FIs and the Monetary Authority of Singapore. Three hundred and sixty-five pieces of feedback were reportedly reviewed and discussed by affected parties in plenary sessions.

“As one of the top financial hubs in the region, it is crucial that the financial industry seizes the cost and risk reduction opportunities offered by cloud computing services. The partnership with CSPs would also strengthen the technology and operational resilience of individual institutions as cloud infrastructure scales on demand to support fluctuating workloads,” said Ong–Ang Ai Boon, director of ABS.

Join Singapore Business Review community
Join Singapore Business Review community
A NOTE FROM SINGAPORE BUSINESS REVIEW

Reaching the people who run Asia's businesses is harder than it used to be.

Inboxes are crowded. Attention is short. The executives you most want to reach — the founders, CFOs, and operators who actually move budgets — are the hardest to find through the usual channels. If you're building a company, a category, or a reputation, you already know this.

We've spent twenty years building the room they read. Singapore Business Review is where senior decision makers in Singapore and across Southeast Asia come for business coverage they can't get elsewhere — in print, online, and in person at the summits and roundtables we host across seven markets.

If you have something these readers should know about — a point of view worth publishing, a product worth their attention, an event worth their time — we'd like to hear what you're trying to do.