MAS tightens cybersecurity rules on FIs

It will require FIs to implement 6 measures that will address flaws in a timely manner.

The Monetary Authority of Singapore (MAS) launched the consultation for the proposed requirements for financial institutions (FIs) in Singapore to implement essential cybersecurity measures to protect their IT systems.

According to an announcement, FIs will be required to implement six cybersecurity measures: address system security flaws in a timely manner; establish and implement robust security for systems; deploy security devices to secure system connections; install anti-virus software to mitigate the risk of malware infection; restrict the use of system administrator accounts that can modify system configurations; and strengthen user authentication for system administrator accounts on critical systems.

Cyber breaches are often the result of insecure system configurations or compromised system accounts, MAS said. “These measures, which are already part of the existing MAS Technology Risk Management Guidelines, are aimed at enhancing the security of FIs’ systems and networks as well as mitigating the risk of unauthorised use of system accounts with extensive access privileges,” the central bank added.

Recent IT system failures include OCBC’s three-hour services outage. OCBC group CEO Samuel Tsien even acknowledged that the software failure signal was unfortunately not detected for rectification due to a human oversight.”

Join Singapore Business Review community
Join Singapore Business Review community
A NOTE FROM SINGAPORE BUSINESS REVIEW

Reaching the people who run Asia's businesses is harder than it used to be.

Inboxes are crowded. Attention is short. The executives you most want to reach — the founders, CFOs, and operators who actually move budgets — are the hardest to find through the usual channels. If you're building a company, a category, or a reputation, you already know this.

We've spent twenty years building the room they read. Singapore Business Review is where senior decision makers in Singapore and across Southeast Asia come for business coverage they can't get elsewhere — in print, online, and in person at the summits and roundtables we host across seven markets.

If you have something these readers should know about — a point of view worth publishing, a product worth their attention, an event worth their time — we'd like to hear what you're trying to do.