- CPMI-IOSCO are seeking input from stakeholders on a cyber resilience toolkit for financial market infrastructures (FMIs) and on risks to FMIs from third-party service providers.
- The Cyber resilience toolkit: practical considerations for FMIs supports FMIs in strengthening their cyber resilience frameworks.
- The discussion paper FMIs’ reliance on third-party service providers: challenges and risks explores the increased reliance of FMIs on third-party service providers.
The BIS Committee on Payments and Market Infrastructures (CPMI) and the International Organization of Securities Commissions (IOSCO) today published the Cyber resilience toolkit: practical considerations for FMIs (toolkit) and FMIs’ reliance on third-party service providers: challenges and risks (discussion paper).
The toolkit provides practical considerations to support FMIs in strengthening their cyber resilience frameworks and implementing operational resilience-related components of the CPMI-IOSCO Principles for Financial Market Infrastructures (PFMI). It comprises a set of voluntary, non-binding tools covering several broad topics relevant to cyber resilience and is designed to complement the 2016 CPMI-IOSCO Guidance on cyber resilience for financial market infrastructures.
The discussion paper identifies and examines several key challenges related to the provision of third-party services to FMIs, especially for the delivery of critical services. The paper sets out several questions for stakeholders to provide feedback on the identified risks and on potential further engagement.
Comments on the toolkit and discussion paper should be submitted by 01 December 2026 via email to both the BIS CPMI Secretariat (cpmi@bis.org) and the IOSCO Secretariat (cpmi-iosco@iosco.org).