繁
简

CIR

Current

Good practices for addressing vulnerabilities related to operational resilience

Issue Date:

01 Apr 2026

20260401-1-EN.pdf (152.4 KB)

Topic:

Business Continuity Planning

Internal Controls - Insourcing/Outsourcing

Operational Risk Management - Others

Technology Risk Management - Cybersecurity

Technology Risk Management - Others

Group: All Authorized Institutions

Directly related Document
Cross referenced Document
Version History
Superseded Document

Directly related Document

Annex

Current

01 Apr 2026

Annex - Good practices for addressing vulnerabilities related to operational resilience

SPM-NGL

Current

31 May 2022

OR-2 Operational Resilience

Annex

Current

01 Apr 2026

Annex - Good practices for addressing vulnerabilities related to operational resilience

SPM-NGL

Current

31 May 2022

OR-2 Operational Resilience

Version History

Superseded Document

You may also be interested in

CIR

Current

24 May 2016

Cybersecurity Fortification Initiative

CIR

Archive

31 Aug 2022

Guidance on Cloud Computing

CIR

Archive

31 Aug 2022

Guidance on Cloud Computing

Annex: Guidance on Cloud Computing

AML & CFT
- AML/CFT Controls
- Financial Sanctions
- Tax Matters Related
- Others
Authorization
- Digital Banking
- Guide to Authorization
- Mergers/Takeovers/Restructuring
- Minimum Criteria for Authorization
- Money Brokers
- Three-tier Banking System
- Others
Banking Conduct & Enforcement
- Account Opening/Maintenance
- Bank Culture
- Code of Banking Practice
- Complaints
- Consumer Protection
- Credit Data Sharing
- Enforcement/Discipline
- Financial Inclusion
- Others
Business Continuity Planning
Capacity Building
- Enhanced competency framework
- Others
Capital Adequacy
- Capital Base
- Capital Buffers
- CCR
- Credit Risk (non-securitization exposures)
- Credit Risk (securitization exposures)
- Market Risk
- Operational Risk
- Pillar 2
- SIBs
- Sovereign Concentration Risk
- Others
Consolidated Supervision
Corporate Governance
- Board Directorship
- Code of conduct
- Remuneration
- Others
Credit Risk Management
- CCR
- Corporate credit risk management
- Credit risk transfer/Mitigation
- Loan classification/Provisioning
- Property mortgage lending
- Retail credit risk management
- Others
Disclosure
- Pillar 3 requirements
- Others
Fintech
- Commercial data interchange
- Fintech supervisory sandbox
- Open API
- Regtech
- Smart Banking
- Suptech
- Virtual assets
- Others
Green & Sustainable Banking
- Climate risk management
- Sustainability reporting standards
- Others
Interest Rate Risk Management
Internal Controls
- Compliance function
- Insourcing/Outsourcing
- Internal audit function
- Risk management function
- Others
Large Exposures & Risk Concentrations
- Connected parties
- HKMCI-related exposures
- Limits on credit exposures
- Others
Leverage Ratio
Liquidity Risk Management
- Liquidity facilities
- Sound LRM framework
- Statutory liquidity requirements
- Others
Mainland Activities
Market Risk Management
- Algorithmic trading
- Foreign exchange
- Others
Miscellaneous
- BCBS
- Covid-19 challenges
- Deposit protection
- FSB
- SFC/IA/MPFA
- Others
Operational Risk Management
- Commercial Crime Bureau
- Fraud risk management
- Operational and IT incident watch
- Others
OTC Derivatives
- Clearing
- Margining/Risk-mitigation
- Reporting
- Trading
- Others
Recovery planning
Renminbi
Resolution
- Resolution execution
- Resolution framework
- Resolution planning
- Resolution standards
Strategic & Reputation Risk Management
Supervisory Approach
Technology Risk Management
- Cybersecurity
- E-banking
- Fraud risk management
- Others
Treasury market
- Reform of interest rate benchmarks
- Others
Trust Business
Wealth Management & MPF
- Insurance products
- MPF products
- Securities/investment products
- Others