The BIS Committee on Payments and Market Infrastructures (CPMI) and the International Organization of Securities Commissions (IOSCO) have published for consultation the Cyber resilience toolkit: practical considerations for FMIs with an accompanying cover note.
The toolkit supports financial market infrastructures (FMIs) in strengthening their cyber resilience frameworks and implementing operational resilience-related components of the CPMI-IOSCO Principles for Financial Market Infrastructures (PFMI). It comprises a set of voluntary, non-binding tools containing practical considerations across several broad topics relevant to cyber resilience and is designed to complement the 2016 CPMI-IOSCO Guidance on cyber resilience for financial market infrastructures.
The toolkit is associated with another consultative document published by CPMI-IOSCO, FMIs’ reliance on third-party service providers: challenges and risks, which considers cyber resilience at FMIs in the context of risks that may arise through their use of third-party service providers.
Comments on the toolkit should be submitted by 01 December 2026 via email to both the BIS CPMI Secretariat (cpmi@bis.org) and the IOSCO Secretariat (cpmi-iosco@iosco.org). Comments will be published on the websites of the BIS and IOSCO unless otherwise requested. Commercial or other sensitive information should not be included in the submissions, or may be included, with redactions for publication clearly noted.