Bis BIS Releases Cyber Resilience Toolkit for Financial Market Infrastructures
Article Content
- •BIS and IOSCO published a Cyber Resilience Toolkit for FMIs on September 8, 2026.
- •The toolkit aims to enhance cyber resilience frameworks and operational resilience for FMIs.
- •Stakeholder feedback on the toolkit and discussion paper is requested by December 1, 2026.
On September 8, 2026, the BIS Committee on Payments and Market Infrastructures (CPMI) and IOSCO published a Cyber Resilience Toolkit aimed at enhancing the cyber resilience of financial market infrastructures (FMIs). This toolkit is designed to support FMIs in implementing operational resilience components of the CPMI-IOSCO Principles for Financial Market Infrastructures. It includes voluntary, non-binding tools and practical considerations across various topics relevant to cyber resilience. Additionally, a discussion paper was released that examines the risks associated with FMIs' reliance on third-party service providers. Stakeholders are invited to provide feedback on both documents by December 1, 2026. The toolkit complements earlier guidance from 2016 and addresses challenges related to third-party services that FMIs depend on for critical operations.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (2)
Continue Reading
Critical BeyondTrust 9.3 Vulnerability Actively Exploited by Threat Actor A critical vulnerability (CVE-2026-102764) in BeyondTrust Remote Support has been discovered and is actively being exploited by the threat group ARMORY CASTLE, reportedly linked to China. The vulnerability, which has a CVSS score of 9.3, allows unauthenticated attackers to upload files and potentially compromise host…
Korean-speaking Hackers Target PHP Vulnerabilities in Global Campaign A cybersecurity report from Cyfirma reveals that attackers, possibly linked to North Korea's Lazarus group, are preparing to exploit critical vulnerabilities in PHP (CVE-2026-109618 and CVE-2026-109619). These vulnerabilities allow unauthenticated remote code execution, posing a significant threat to government…