Operational Resilience
Rules for resilient payments, ICT risk, incident response, business continuity, outsourcing, and supervisory reporting.
- APRA CPS 230 Operational Risk ManagementAustralian prudential standard for operational risk, service-provider management and business continuity.
- Bank of England Recognised Payment Systems Code of PracticeBank of England requirements for governance, operational resilience and outsourcing at recognised payment-system operators and specified service providers.
- DNB Oversight Regulation for the proper functioning of payment transactionsDNB's oversight framework and interpretation for operational availability and resilience of Dutch payment services, explicitly including iDEAL.
- EBA ICT and Security Risk Management GuidelinesEuropean supervisory baseline for ICT governance, information security, operations, continuity and incident management.
- EBA Outsourcing Arrangements GuidelinesEuropean supervisory requirements for outsourcing governance, registers, due diligence, contracts, concentration risk and exit plans.
- EU Digital Operational Resilience ActEU financial-sector framework for ICT risk management, incident reporting, resilience testing and third-party risk.
- FFIEC Business Continuity ManagementUS interagency examination guidance for resilience, continuity, disaster recovery, testing and third-party dependencies.
- HKMA Supervisory Policy Manual OR-2 — Operational ResilienceHKMA Supervisory Policy Manual OR-2 — Operational Resilience defines payment-sector compliance duties for all authorised institutions supervised by hkma.
- MAS Technology Risk Management GuidelinesSingapore supervisory guidance for technology governance, cyber security, systems resilience, change and third-party risk.
- New Zealand Financial Market Infrastructures Act 2021Establishes the framework under which the Reserve Bank regulates and oversees designated financial market infrastructures.