News from the Wire

Global standard-setting bodies publish a toolkit for cyber resilience

Tuesday, September 08, 2026 — 14:18:22 (UTC)

IOSCO/MR/18/2026 Madrid, 8 September 2026

Global standard-setting bodies publish a toolkit for cyber resilience at Financial Market Infrastructures (FMIs) and a discussion paper on FMIs' reliance on third-party service providers

CPMI-IOSCO are seeking input from stakeholders on a cyber resilience toolkit for financial market infrastructures (FMIs) and on risks to FMIs from third-party service providers.

The Cyber Resilience Toolkit: Practical Considerations for FMIs supports FMIs in strengthening their cyber resilience frameworks.

The discussion paper FMIs’ Reliance on Third-Party Service Providers: Challenges and Risks, explores the increased reliance of FMIs on third-party service providers.

The Bank of International Settlements (BIS)’ Committee on Payments and Market Infrastructures (CPMI) and the International Organization of Securities Commissions (IOSCO) today published the Cyber Resilience Toolkit: Practical Considerations for FMIs (toolkit) and FMIs’ Reliance on Third-Party Service Providers: Challenges and Risks (discussion paper).

The toolkit provides practical considerations to support FMIs in strengthening their cyber resilience frameworks and implementing operational resilience-related components of the CPMI-IOSCO Principles for Financial Market Infrastructures (PFMI). It comprises a set of voluntary, non-binding tools covering several broad topics relevant to cyber resilience and is designed to complement the 2016 CPMI-IOSCO Guidance on Cyber Resilience for Financial Market Infrastructures.

The discussion paper identifies and examines several key challenges related to the provision of third-party services to FMIs, especially for the delivery of critical services. The paper sets out several questions for stakeholders to provide feedback on the identified risks and on potential further engagement.

Comments on the toolkit and discussion paper should be submitted by 01 December 2026 via email to both the BIS CPMI Secretariat (cpmi@bis.org) and the IOSCO Secretariat (cpmi-iosco@iosco.org).

Notes to Editors

IOSCO is the leading international policy forum for securities and derivatives regulators and the global standard setter for financial markets regulation. It develops, implements and promotes adherence to internationally recognized standards for financial markets regulation and works closely with other international organizations on the global regulatory reform agenda.

The Organization's membership regulates more than 99% of the world's financial markets in over 130 jurisdictions. By providing high quality technical assistance, education, and training, IOSCO supports its members to come together to achieve the following three objectives: Enhance investor protection;

Ensure markets are fair and efficient; and

Promote financial stability by reducing systemic risk.

The IOSCO Board is the governing and standard-setting body of IOSCO and is made up of 35 securities regulators. Mr. Jean-Paul Servais, the Chair of Belgium’s Financial Services and Markets Authority (FSMA), is the Chair of the IOSCO Board. Dr. Islam Azzam, Executive Chairman, Financial Regulatory Authority, Egypt, Mr. Toshiyuki Miyoshi, Vice Minister for International Affairs, Financial Services Agency, Japan, Mr. Mark T. Uyeda, Commissioner, US Securities and Exchange Commission (SEC) and Mr. Grant Vingoe, Chief Executive Officer, Ontario Securities Commission (OSC) are Vice-Chairs of the IOSCO Board.

The Growth and Emerging Markets (GEM) Committee is the largest Committee within IOSCO, representing more than 75% of the IOSCO membership, including ten of the G20 members. The Committee unites members from growth and emerging markets and communicates their views at other global regulatory discussions. It is chaired by Dr. Islam Azzam, Executive Chairman, Financial Regulatory Authority, Egypt.

IOSCO counts four regional committees: (1) Africa / Middle-East (AMERC), chaired by H.E. Waleed Saeed Al Awadhi, Chief Executive Officer, Securities and Commodities Authority, United Arab Emirates; (2) Asia & Pacific (APRC), chaired by Ms. Julia Leung Chief, Executive Officer of the Hong-Kong Securities and Futures Commission; (3) European Regional Committee (ERC), chaired by Mr. Jean-Paul Servais; and (4) Inter-American Regional Committee (IARC), chaired by Ms. Christina Rolle, Executive Director, Securities Commission of The Bahamas.

IOSCO’s General Secretariat is headquartered in Madrid, Spain. The Secretariat supports and coordinates the work of IOSCO and is comprised of permanent staff and member secondees. It is led by Rodrigo Buenaventura who was appointed IOSCO’s Secretary General in January 2025.

Press Enquiries

Emilie Bernard

Communications Manager, IOSCO

e.bernard@iosco.org / www.iosco.org

Notice to readers: These are archived articles. Contact information, links and other details may be out of date. We regret any inconvenience.

Source: Company press release.

Categories: Reports and research