On 8 September 2026, the Committee on Payments and Market Infrastructures (CPMI) and the International Organization of Securities Commissions (IOSCO) published the CPMI-IOSCO cyber resilience toolkit for public comment. It sets out four voluntary tools and asks central counterparties, central securities depositories, securities settlement systems, payment systems and trade repositories to look hard at how…
On 28 July 2026, the Monetary Authority of Singapore (MAS) and the Association of Banks in Singapore (ABS) launched a joint body to defend the financial sector against cyber attacks that use frontier artificial intelligence. Its formal name is the AI-Driven Cyber and Technology Risk Taskforce, shortened to ACT. For a technology-risk or compliance officer,…
A UK banking group with an EU financial entity identified by its competent authority for DORA threat-led penetration testing may be subject to STAR-FS in the UK and DORA TLPT in the EU at the same time. The Bank of England, the Prudential Regulation Authority and the Financial Conduct Authority maintain STAR-FS, the Simulated Targeted…