OSFI releases advisory with expectations for reporting technology or cyber security incidents that affect FRPPs
July 26, 2023
The Office of the Superintendent of Financial Institutions (OSFI) recently released an advisory describing expectations for reporting technology or cyber security incidents that would affect a federally regulated private pension plan (FRPP).
When a cyber security or technology incident occurs, OSFI expects FRPP administrators to notify OSFI by filing the Technology and Cyber Incident Report for FRPPs (Incident Report). OSFI considers a technology or cyber security incident to be an incident that has an impact, or the potential to have an impact, on the operations of a FRPP, including its confidentiality, integrity or the availability of its systems and information.
The requirement to notify OSFI should be reflected in a FRPP's risk management framework or resiliency plan.
Questions and comments concerning this Advisory should be provided no later than September 30, 2023.
Find the full advisory by clicking on more information below:
