Global standard-setting bodies publish a toolkit for cyber resilience at Financial Market Infrastructures
The Bank of International Settlements (BIS)’ Committee on Payments and Market Infrastructures (CPMI) and the International Organization of Securities Commissions (IOSCO) today published the Cyber Resilience Toolkit: Practical Considerations for FMIs (toolkit) and FMIs’ Reliance on Third-Party Service Providers: Challenges and Risks (discussion paper).
The toolkit provides practical considerations to support FMIs in strengthening their cyber resilience frameworks and implementing operational resilience-related components of the CPMI-IOSCO Principles for Financial Market Infrastructures (PFMI). It comprises a set of voluntary, non-binding tools covering several broad topics relevant to cyber resilience and is designed to complement the 2016 CPMI-IOSCO Guidance on Cyber Resilience for Financial Market Infrastructures.
The discussion paper identifies and examines several key challenges related to the provision of third-party services to FMIs, especially for the delivery of critical services. The paper sets out several questions for stakeholders to provide feedback on the identified risks and on potential further engagement.
Comments on the toolkit and discussion paper should be submitted by 01 December 2026 via email to both the BIS CPMI Secretariat ([email protected]) and the IOSCO Secretariat ([email protected]).