Good practices for addressing vulnerabilities related to operational resilience

Issue Date:

01 Apr 2026

20260401-1-EN.pdf (152.4 KB)

Topic:

Operational Risk Management - Others

Group: All Authorized Institutions

Directly related Document
Cross referenced Document
Version History
Superseded Document

Directly related Document

Annex

Current

01 Apr 2026

Annex - Good practices for addressing vulnerabilities related to operational resilience

Annex

Current

01 Apr 2026

Annex - Good practices for addressing vulnerabilities related to operational resilience

Cross referenced Document

Version History

Superseded Document

You may also be interested in

CIR

Archive

11 Nov 2005

Re-launch of the Initial Public Offering ("IPO") of the Link Real Estate Investment Trust ("Link REIT")

SPM-NGL

Current

25 Jul 2022

OR-1 Operational Risk Management

AML & CFT
- AML/CFT Controls
- Financial Sanctions
- Tax Matters Related
- Others
Authorization
- Digital Banking
- Guide to Authorization
- Mergers/Takeovers/Restructuring
- Minimum Criteria for Authorization
- Money Brokers
- Three-tier Banking System
- Others
Banking Conduct & Enforcement
- Account Opening/Maintenance
- Bank Culture
- Code of Banking Practice
- Complaints
- Consumer Protection
- Credit Data Sharing
- Enforcement/Discipline
- Financial Inclusion
- Others
Business Continuity Planning
Capacity Building
- Enhanced competency framework
- Others
Capital Adequacy
- Capital Base
- Capital Buffers
- CCR
- Credit Risk (non-securitization exposures)
- Credit Risk (securitization exposures)
- Market Risk
- Operational Risk
- Pillar 2
- SIBs
- Sovereign Concentration Risk
- Others
Consolidated Supervision
Corporate Governance
- Board Directorship
- Code of conduct
- Remuneration
- Others
Credit Risk Management
- CCR
- Corporate credit risk management
- Credit risk transfer/Mitigation
- Loan classification/Provisioning
- Property mortgage lending
- Retail credit risk management
- Others
Disclosure
- Pillar 3 requirements
- Others
Fintech
- Commercial data interchange
- Fintech supervisory sandbox
- Open API
- Regtech
- Smart Banking
- Suptech
- Virtual assets
- Others
Green & Sustainable Banking
- Climate risk management
- Sustainability reporting standards
- Others
Interest Rate Risk Management
Internal Controls
- Compliance function
- Insourcing/Outsourcing
- Internal audit function
- Risk management function
- Others
Large Exposures & Risk Concentrations
- Connected parties
- HKMCI-related exposures
- Limits on credit exposures
- Others
Leverage Ratio
Liquidity Risk Management
- Liquidity facilities
- Sound LRM framework
- Statutory liquidity requirements
- Others
Mainland Activities
Market Risk Management
- Algorithmic trading
- Foreign exchange
- Others
Miscellaneous
- BCBS
- Covid-19 challenges
- Deposit protection
- FSB
- SFC/IA/MPFA
- Others
Operational Risk Management
- Commercial Crime Bureau
- Fraud risk management
- Operational and IT incident watch
- Others
OTC Derivatives
- Clearing
- Margining/Risk-mitigation
- Reporting
- Trading
- Others
Recovery planning
Renminbi
Resolution
- Resolution execution
- Resolution framework
- Resolution planning
- Resolution standards
Strategic & Reputation Risk Management
Supervisory Approach
Technology Risk Management
- Cybersecurity
- E-banking
- Fraud risk management
- Others
Treasury market
- Reform of interest rate benchmarks
- Others
Trust Business
Wealth Management & MPF
- Insurance products
- MPF products
- Securities/investment products
- Others

Good practices for addressing vulnerabilities related to operational resilience

Directly related Document

Cross referenced Document

Version History

Superseded Document

You may also be interested in

+

-