-
CPMI-IOSCO publishes cyber resilience toolkit and discussion paper on FMI cyber resilience and reliance on third-party providers
8 September 2026The Committee on Payments and Market Infrastructures (CPMI) and the International Organization of Securities Commissions (IOSCO) have published a cyber resilience toolkit for financial market infrastructures (FMIs) and a discussion paper on the challenges and risks of FMIs' reliance on third-party service providers. The toolkit provides a set of voluntary, non-binding practical tools intended to help FMIs strengthen their cyber resilience frameworks and implement operational resilience-related components of the CPMI-IOSCO Principles for Financial Market Infrastructures. The toolkit is intended to complement the 2016 guidance on cyber resilience for FMIs. In parallel, the discussion paper identifies and examines key challenges related to the provision of third-party services to FMIs, especially for the delivery of critical services. It sets out several questions for stakeholders on the identified risks and possible areas for further engagement. The deadline for comments on both the toolkit and the discussion paper is 1 December.
Blog
