MAS amends rules on managing tech risks

Financial firms should analyse and share threat intelligence within the ecosystem.

The Monetary Authority of Singapore (MAS) has revised its guidelines for managing technology risks to fight against growing cyber threats, a statement read.

This comes after a recent spate of attacks on supply chains, which targeted multiple IT service providers through the exploitation of widely used network management software.

It included stronger risk mitigation strategies, such as establishing a robust process for the analysis and sharing of cyber threat intelligence within the financial ecosystem and conducting cyber exercises to stress test defences by simulating attack tactics, techniques, and procedures used by real-world attackers.

In addition, due to growing reliance on third party service providers, MAS suggests that FIs should exercise strong oversight of arrangements with third party service providers to ensure system resilience and maintain data confidentiality and integrity.

Moreover, boards and senior management should ensure that a chief information officer and a chief information security officer should account for managing technology and cyber risk, and the boards should include members with the relevant knowledge of such risks.

Join Singapore Business Review community
Join Singapore Business Review community
A NOTE FROM SINGAPORE BUSINESS REVIEW

Reaching the people who run Asia's businesses is harder than it used to be.

Inboxes are crowded. Attention is short. The executives you most want to reach — the founders, CFOs, and operators who actually move budgets — are the hardest to find through the usual channels. If you're building a company, a category, or a reputation, you already know this.

We've spent twenty years building the room they read. Singapore Business Review is where senior decision makers in Singapore and across Southeast Asia come for business coverage they can't get elsewhere — in print, online, and in person at the summits and roundtables we host across seven markets.

If you have something these readers should know about — a point of view worth publishing, a product worth their attention, an event worth their time — we'd like to hear what you're trying to do.