A.4—Related Guidance
>Control Description
Technology and cyber risks are dynamic and intersect with other risk areas. FRFIs should read this Guideline in conjunction with other OSFI guidance, tools and supervisory communications, as well as guidance issued by other authorities applicable to the FRFI's operating environment; in particular:
OSFI Corporate Governance Guideline;
OSFI Guideline E-21 (Operational Risk Management);
OSFI Guideline B-10 (Outsourcing);
OSFI Cyber Security Self-Assessment Tool;
OSFI Technology and Cyber Security Incident Reporting Advisory;
Alerts, advisories and other communications issued by the Canadian Centre for Cyber Security; and
Recognized frameworks and standards for technology operations and information security.
Ask AI
Configure your API key to use AI features.