MAS issues new guidance on public cloud services

The Monetary Authority of Singapore (MAS) has issued new guidelines on outsourcing risk management to financial institutions (FIs) following extensive industry and public consultation. The guidelines provide expanded guidance to the industry on prudent risk management practices for outsourcing, including cloud services, which have been adopted by a growing number of FIs.

Updates to the guidelines include:

a) introduction of a new section on cloud computing that sets out MAS’ stance on cloud computing;
b) removal of expectation for FIs to pre-notify MAS of material outsourcing arrangements; and
c) revision to the definition of “material outsourcing arrangement” to include, under certain circumstances, an arrangement that involves customer information.

Ong Chong Tee, Deputy Managing Director, MAS, said, “The new outsourcing guidelines reflect MAS’ continuing efforts to strengthen our guidance to financial institutions in this area. The revised guidelines build on the existing ones to better capture evolving threats such as offshoring business models and heightened cyber risks.”

Interested?

Read the revised MAS Outsourcing Guidelines. This set of Guidelines replaces the previous MAS Outsourcing Guidelines as well as a circular on Information Technology Outsourcing.