CPMI-IOSCO release cyber resilience toolkit and paper on third-party risks for FMIs

The BIS Committee on Payments and Market Infrastructures (CPMI) and the International Organization of Securities Commissions (IOSCO) published the Cyber resilience toolkit: practical considerations for FMIs and the discussion paper FMIs’ reliance on third-party service providers: challenges and risks. The toolkit offers voluntary, non-binding tools to help FMIs strengthen cyber resilience frameworks and implement operational resilience components of the CPMI-IOSCO Principles for Financial Market Infrastructures (PFMI), complementing the 2016 CPMI-IOSCO Guidance on cyber resilience for financial market infrastructures. The discussion paper examines key challenges and risks related to FMIs' increased reliance on third-party service providers, especially for critical service delivery, and seeks stakeholder feedback on identified risks.