Citation Tagging

Citation Reference: 2.6. ¶ 1

Citation Guidance: As financial institutions increasingly rely on third parties, their supply chains have expanded and become more complex, making risk management more challenging. In this context, there have been cases where cyber incidents originating from the supply chain had a significant impact on financial institutions. Given these circumstances, financial institutions must appropriately manage cybersecurity risks across their supply chains. In addition to this guideline, comprehensive guidelines for supervision, etc., provide general perspectives on outsourcing (including multi-tiered outsourcing) and key considerations for managing system risks related to outsourcing. As noted in Section 2.6 (4), it is important to recognize that third-party risk management requires a risk-based approach.