国际清算银行-银行的网络安全——第二代监管方法（英）-2023.6-28页_1mb

This paper analyzes the evolution of banking cybersecurity regulations, focusing on second-generation approaches that enhance cyber resilience. It highlights the growing threat of cyber incidents to financial stability, with costs rising due to digitalization, increased third-party dependencies, and geopolitical tensions. The paper outlines two primary regulatory methods: adapting existing frameworks (e.g., operational risk rules) or creating comprehensive regulations. These aim to balance prescriptive requirements with flexibility, incorporating principles like proportionality to address varying bank sizes. Key areas covered include incident response, threat intelligence sharing, cyber hygiene, and workforce training, with emerging markets showing more prescriptive demands. International collaboration via bodies like the FSB and G7 has improved regulatory convergence, but challenges remain in enforcement and resource allocation. The paper concludes by advocating for stronger global coordination and capacity-building, especially in emerging economies, to address systemic risks effectively.