{"id":38698,"date":"2021-11-26T12:00:00","date_gmt":"2021-11-26T17:00:00","guid":{"rendered":"https:\/\/www.iposgoode.ca\/?p=38698"},"modified":"2021-11-26T12:00:00","modified_gmt":"2021-11-26T17:00:00","slug":"osfi-launches-consultation-on-draft-technology-and-cyber-risk-management-guideline","status":"publish","type":"post","link":"https:\/\/www.yorku.ca\/osgoode\/iposgoode\/2021\/11\/26\/osfi-launches-consultation-on-draft-technology-and-cyber-risk-management-guideline\/","title":{"rendered":"OSFI Launches Consultation On Draft Technology And Cyber Risk Management Guideline"},"content":{"rendered":"\n

M. Imtiaz Karamat is an IP Osgoode Alumnus and Associate Lawyer at Deeth Williams Wall LLP. This article was originally posted on E-TIPS\u2122 For Deeth Williams Wall LLP on November 24, 2021<\/a>.<\/em><\/p>\n

On November 9, 2021, the Office of the Superintendent of Financial Institutions (OSFI)\u00a0launched<\/a>\u00a0a public consultation on Draft Guideline B\u201113: Technology and Cyber Risk Management (the Guideline). It applies to federally regulated financial institutions (FRFIs) and addresses OSFI\u2019s expectations in relation to technology and cyber risks.<\/p>\n

The Guideline is organized into five domains, with each domain describing OSFI\u2019s desired outcome for FRFIs in a certain aspect of technology and cyber risk management:<\/p>\n

    \n
  1. Governance and Risk Management:\u00a0<\/strong>the FRFI has a clear framework and comprehensive strategy to govern technology and cyber risks.<\/li>\n
  2. Technology Operations:\u00a0<\/strong>there is\u00a0<\/strong>a resilient and scalable technology environment in place that is kept up-to-date by robust operating processes.<\/li>\n
  3. Cyber Security:\u00a0<\/strong>the FRFI is able to maintain the confidentiality, integrity, and availability of technology assets.<\/li>\n
  4. Third-Party Provider Technology and Cyber Risk:\u00a0<\/strong>third-party providers deliver reliable and secure technology and cyber operations to the FRFI.<\/li>\n
  5. Technology Resilience:\u00a0<\/strong>the FRFI has proper disaster recovery capabilities that allows the delivery of technology services through operational disruption.<\/li>\n<\/ol>\n

    In its announcement of the consultation, OSFI commented on the importance of stakeholder engagement to strike the appropriate balance between its prudential objectives, while still allowing financial institutions to compete. Accordingly, OSFI welcomes public feedback on the Guideline and is especially interested in feedback that addresses the clarity and application of their outlined expectations, the balance between principles and prescriptiveness in these expectations, and other suggestions that relate to OSFI\u2019s mandate.<\/p>\n

    The consultation is open until February 9, 2022 and comments can be submitted at\u00a0Tech.Cyber@osfi-bsif.gc.ca<\/a>.<\/p>\n","protected":false},"excerpt":{"rendered":"","protected":false},"author":2140,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_kad_blocks_custom_css":"","_kad_blocks_head_custom_js":"","_kad_blocks_body_custom_js":"","_kad_blocks_footer_custom_js":"","footnotes":""},"categories":[3,2635,3148,669,124],"tags":[3903,4186,4187,4188,20,4189],"class_list":["post-38698","post","type-post","status-publish","format-standard","hentry","category-blogs","category-cybersecurity","category-data-governance","category-osgoode-alumnus","category-technology","tag-consultation","tag-cyber-risks","tag-federally-regulated-financial-institutions","tag-frfis","tag-imtiaz-karamat","tag-osfi"],"yoast_head":"\nOSFI Launches Consultation On Draft Technology And Cyber Risk Management Guideline - IPOsgoode<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.yorku.ca\/osgoode\/iposgoode\/2021\/11\/26\/osfi-launches-consultation-on-draft-technology-and-cyber-risk-management-guideline\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"OSFI Launches Consultation On Draft Technology And Cyber Risk Management Guideline - IPOsgoode\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.yorku.ca\/osgoode\/iposgoode\/2021\/11\/26\/osfi-launches-consultation-on-draft-technology-and-cyber-risk-management-guideline\/\" \/>\n<meta property=\"og:site_name\" content=\"IPOsgoode\" \/>\n<meta property=\"article:published_time\" content=\"2021-11-26T17:00:00+00:00\" \/>\n<meta name=\"author\" content=\"ccraig\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"ccraig\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"1 minute\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.yorku.ca\\\/osgoode\\\/iposgoode\\\/2021\\\/11\\\/26\\\/osfi-launches-consultation-on-draft-technology-and-cyber-risk-management-guideline\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.yorku.ca\\\/osgoode\\\/iposgoode\\\/2021\\\/11\\\/26\\\/osfi-launches-consultation-on-draft-technology-and-cyber-risk-management-guideline\\\/\"},\"author\":{\"name\":\"ccraig\",\"@id\":\"https:\\\/\\\/www.yorku.ca\\\/osgoode\\\/iposgoode\\\/#\\\/schema\\\/person\\\/09b0ef7189d5a2bd6fef2472e5ea5b94\"},\"headline\":\"OSFI Launches Consultation On Draft Technology And Cyber Risk Management Guideline\",\"datePublished\":\"2021-11-26T17:00:00+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.yorku.ca\\\/osgoode\\\/iposgoode\\\/2021\\\/11\\\/26\\\/osfi-launches-consultation-on-draft-technology-and-cyber-risk-management-guideline\\\/\"},\"wordCount\":296,\"commentCount\":0,\"keywords\":[\"Consultation\",\"Cyber Risks\",\"Federally Regulated Financial Institutions\",\"FRFIs\",\"Imtiaz Karamat\",\"OSFI\"],\"articleSection\":[\"Blogs\",\"Cybersecurity\",\"Data governance\",\"Osgoode Alumnus\",\"Technology\"],\"inLanguage\":\"en-CA\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.yorku.ca\\\/osgoode\\\/iposgoode\\\/2021\\\/11\\\/26\\\/osfi-launches-consultation-on-draft-technology-and-cyber-risk-management-guideline\\\/\",\"url\":\"https:\\\/\\\/www.yorku.ca\\\/osgoode\\\/iposgoode\\\/2021\\\/11\\\/26\\\/osfi-launches-consultation-on-draft-technology-and-cyber-risk-management-guideline\\\/\",\"name\":\"OSFI Launches Consultation On Draft Technology And Cyber Risk Management Guideline - IPOsgoode\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.yorku.ca\\\/osgoode\\\/iposgoode\\\/#website\"},\"datePublished\":\"2021-11-26T17:00:00+00:00\",\"author\":{\"@id\":\"https:\\\/\\\/www.yorku.ca\\\/osgoode\\\/iposgoode\\\/#\\\/schema\\\/person\\\/09b0ef7189d5a2bd6fef2472e5ea5b94\"},\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.yorku.ca\\\/osgoode\\\/iposgoode\\\/2021\\\/11\\\/26\\\/osfi-launches-consultation-on-draft-technology-and-cyber-risk-management-guideline\\\/#breadcrumb\"},\"inLanguage\":\"en-CA\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.yorku.ca\\\/osgoode\\\/iposgoode\\\/2021\\\/11\\\/26\\\/osfi-launches-consultation-on-draft-technology-and-cyber-risk-management-guideline\\\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.yorku.ca\\\/osgoode\\\/iposgoode\\\/2021\\\/11\\\/26\\\/osfi-launches-consultation-on-draft-technology-and-cyber-risk-management-guideline\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.yorku.ca\\\/osgoode\\\/iposgoode\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"OSFI Launches Consultation On Draft Technology And Cyber Risk Management Guideline\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.yorku.ca\\\/osgoode\\\/iposgoode\\\/#website\",\"url\":\"https:\\\/\\\/www.yorku.ca\\\/osgoode\\\/iposgoode\\\/\",\"name\":\"IPOsgoode\",\"description\":\"An Authoritive Leader in IP\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.yorku.ca\\\/osgoode\\\/iposgoode\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-CA\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.yorku.ca\\\/osgoode\\\/iposgoode\\\/#\\\/schema\\\/person\\\/09b0ef7189d5a2bd6fef2472e5ea5b94\",\"name\":\"ccraig\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-CA\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/4d6461ef50f637a66f0e694df440ca5896971e12de84d604936521b184fec22a?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/4d6461ef50f637a66f0e694df440ca5896971e12de84d604936521b184fec22a?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/4d6461ef50f637a66f0e694df440ca5896971e12de84d604936521b184fec22a?s=96&d=mm&r=g\",\"caption\":\"ccraig\"},\"url\":\"https:\\\/\\\/www.yorku.ca\\\/osgoode\\\/iposgoode\\\/author\\\/ccraig\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"OSFI Launches Consultation On Draft Technology And Cyber Risk Management Guideline - IPOsgoode","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.yorku.ca\/osgoode\/iposgoode\/2021\/11\/26\/osfi-launches-consultation-on-draft-technology-and-cyber-risk-management-guideline\/","og_locale":"en_US","og_type":"article","og_title":"OSFI Launches Consultation On Draft Technology And Cyber Risk Management Guideline - IPOsgoode","og_url":"https:\/\/www.yorku.ca\/osgoode\/iposgoode\/2021\/11\/26\/osfi-launches-consultation-on-draft-technology-and-cyber-risk-management-guideline\/","og_site_name":"IPOsgoode","article_published_time":"2021-11-26T17:00:00+00:00","author":"ccraig","twitter_card":"summary_large_image","twitter_misc":{"Written by":"ccraig","Est. reading time":"1 minute"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.yorku.ca\/osgoode\/iposgoode\/2021\/11\/26\/osfi-launches-consultation-on-draft-technology-and-cyber-risk-management-guideline\/#article","isPartOf":{"@id":"https:\/\/www.yorku.ca\/osgoode\/iposgoode\/2021\/11\/26\/osfi-launches-consultation-on-draft-technology-and-cyber-risk-management-guideline\/"},"author":{"name":"ccraig","@id":"https:\/\/www.yorku.ca\/osgoode\/iposgoode\/#\/schema\/person\/09b0ef7189d5a2bd6fef2472e5ea5b94"},"headline":"OSFI Launches Consultation On Draft Technology And Cyber Risk Management Guideline","datePublished":"2021-11-26T17:00:00+00:00","mainEntityOfPage":{"@id":"https:\/\/www.yorku.ca\/osgoode\/iposgoode\/2021\/11\/26\/osfi-launches-consultation-on-draft-technology-and-cyber-risk-management-guideline\/"},"wordCount":296,"commentCount":0,"keywords":["Consultation","Cyber Risks","Federally Regulated Financial Institutions","FRFIs","Imtiaz Karamat","OSFI"],"articleSection":["Blogs","Cybersecurity","Data governance","Osgoode Alumnus","Technology"],"inLanguage":"en-CA"},{"@type":"WebPage","@id":"https:\/\/www.yorku.ca\/osgoode\/iposgoode\/2021\/11\/26\/osfi-launches-consultation-on-draft-technology-and-cyber-risk-management-guideline\/","url":"https:\/\/www.yorku.ca\/osgoode\/iposgoode\/2021\/11\/26\/osfi-launches-consultation-on-draft-technology-and-cyber-risk-management-guideline\/","name":"OSFI Launches Consultation On Draft Technology And Cyber Risk Management Guideline - IPOsgoode","isPartOf":{"@id":"https:\/\/www.yorku.ca\/osgoode\/iposgoode\/#website"},"datePublished":"2021-11-26T17:00:00+00:00","author":{"@id":"https:\/\/www.yorku.ca\/osgoode\/iposgoode\/#\/schema\/person\/09b0ef7189d5a2bd6fef2472e5ea5b94"},"breadcrumb":{"@id":"https:\/\/www.yorku.ca\/osgoode\/iposgoode\/2021\/11\/26\/osfi-launches-consultation-on-draft-technology-and-cyber-risk-management-guideline\/#breadcrumb"},"inLanguage":"en-CA","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.yorku.ca\/osgoode\/iposgoode\/2021\/11\/26\/osfi-launches-consultation-on-draft-technology-and-cyber-risk-management-guideline\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.yorku.ca\/osgoode\/iposgoode\/2021\/11\/26\/osfi-launches-consultation-on-draft-technology-and-cyber-risk-management-guideline\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.yorku.ca\/osgoode\/iposgoode\/"},{"@type":"ListItem","position":2,"name":"OSFI Launches Consultation On Draft Technology And Cyber Risk Management Guideline"}]},{"@type":"WebSite","@id":"https:\/\/www.yorku.ca\/osgoode\/iposgoode\/#website","url":"https:\/\/www.yorku.ca\/osgoode\/iposgoode\/","name":"IPOsgoode","description":"An Authoritive Leader in IP","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.yorku.ca\/osgoode\/iposgoode\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-CA"},{"@type":"Person","@id":"https:\/\/www.yorku.ca\/osgoode\/iposgoode\/#\/schema\/person\/09b0ef7189d5a2bd6fef2472e5ea5b94","name":"ccraig","image":{"@type":"ImageObject","inLanguage":"en-CA","@id":"https:\/\/secure.gravatar.com\/avatar\/4d6461ef50f637a66f0e694df440ca5896971e12de84d604936521b184fec22a?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/4d6461ef50f637a66f0e694df440ca5896971e12de84d604936521b184fec22a?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/4d6461ef50f637a66f0e694df440ca5896971e12de84d604936521b184fec22a?s=96&d=mm&r=g","caption":"ccraig"},"url":"https:\/\/www.yorku.ca\/osgoode\/iposgoode\/author\/ccraig\/"}]}},"taxonomy_info":{"category":[{"value":3,"label":"Blogs"},{"value":2635,"label":"Cybersecurity"},{"value":3148,"label":"Data governance"},{"value":669,"label":"Osgoode Alumnus"},{"value":124,"label":"Technology"}],"post_tag":[{"value":3903,"label":"Consultation"},{"value":4186,"label":"Cyber Risks"},{"value":4187,"label":"Federally Regulated Financial Institutions"},{"value":4188,"label":"FRFIs"},{"value":20,"label":"Imtiaz Karamat"},{"value":4189,"label":"OSFI"}]},"featured_image_src_large":false,"author_info":{"display_name":"ccraig","author_link":"https:\/\/www.yorku.ca\/osgoode\/iposgoode\/author\/ccraig\/"},"comment_info":"","category_info":[{"term_id":3,"name":"Blogs","slug":"blogs","term_group":0,"term_taxonomy_id":3,"taxonomy":"category","description":"","parent":0,"count":853,"filter":"raw","cat_ID":3,"category_count":853,"category_description":"","cat_name":"Blogs","category_nicename":"blogs","category_parent":0},{"term_id":2635,"name":"Cybersecurity","slug":"cybersecurity","term_group":0,"term_taxonomy_id":2635,"taxonomy":"category","description":"","parent":0,"count":28,"filter":"raw","cat_ID":2635,"category_count":28,"category_description":"","cat_name":"Cybersecurity","category_nicename":"cybersecurity","category_parent":0},{"term_id":3148,"name":"Data governance","slug":"data-governance","term_group":0,"term_taxonomy_id":3148,"taxonomy":"category","description":"","parent":0,"count":20,"filter":"raw","cat_ID":3148,"category_count":20,"category_description":"","cat_name":"Data governance","category_nicename":"data-governance","category_parent":0},{"term_id":669,"name":"Osgoode Alumnus","slug":"osgoode-alumnus","term_group":0,"term_taxonomy_id":669,"taxonomy":"category","description":"","parent":0,"count":26,"filter":"raw","cat_ID":669,"category_count":26,"category_description":"","cat_name":"Osgoode Alumnus","category_nicename":"osgoode-alumnus","category_parent":0},{"term_id":124,"name":"Technology","slug":"technology","term_group":0,"term_taxonomy_id":124,"taxonomy":"category","description":"","parent":0,"count":473,"filter":"raw","cat_ID":124,"category_count":473,"category_description":"","cat_name":"Technology","category_nicename":"technology","category_parent":0}],"tag_info":[{"term_id":3903,"name":"Consultation","slug":"consultation","term_group":0,"term_taxonomy_id":3903,"taxonomy":"post_tag","description":"","parent":0,"count":3,"filter":"raw"},{"term_id":4186,"name":"Cyber Risks","slug":"cyber-risks","term_group":0,"term_taxonomy_id":4186,"taxonomy":"post_tag","description":"","parent":0,"count":1,"filter":"raw"},{"term_id":4187,"name":"Federally Regulated Financial Institutions","slug":"federally-regulated-financial-institutions","term_group":0,"term_taxonomy_id":4187,"taxonomy":"post_tag","description":"","parent":0,"count":2,"filter":"raw"},{"term_id":4188,"name":"FRFIs","slug":"frfis","term_group":0,"term_taxonomy_id":4188,"taxonomy":"post_tag","description":"","parent":0,"count":1,"filter":"raw"},{"term_id":20,"name":"Imtiaz Karamat","slug":"imtiaz-karamat","term_group":0,"term_taxonomy_id":20,"taxonomy":"post_tag","description":"","parent":0,"count":41,"filter":"raw"},{"term_id":4189,"name":"OSFI","slug":"osfi","term_group":0,"term_taxonomy_id":4189,"taxonomy":"post_tag","description":"","parent":0,"count":3,"filter":"raw"}],"_links":{"self":[{"href":"https:\/\/www.yorku.ca\/osgoode\/iposgoode\/wp-json\/wp\/v2\/posts\/38698","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.yorku.ca\/osgoode\/iposgoode\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.yorku.ca\/osgoode\/iposgoode\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.yorku.ca\/osgoode\/iposgoode\/wp-json\/wp\/v2\/users\/2140"}],"replies":[{"embeddable":true,"href":"https:\/\/www.yorku.ca\/osgoode\/iposgoode\/wp-json\/wp\/v2\/comments?post=38698"}],"version-history":[{"count":0,"href":"https:\/\/www.yorku.ca\/osgoode\/iposgoode\/wp-json\/wp\/v2\/posts\/38698\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.yorku.ca\/osgoode\/iposgoode\/wp-json\/wp\/v2\/media?parent=38698"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.yorku.ca\/osgoode\/iposgoode\/wp-json\/wp\/v2\/categories?post=38698"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.yorku.ca\/osgoode\/iposgoode\/wp-json\/wp\/v2\/tags?post=38698"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}