Fintech developments are shaking up mandates within the existing regulatory architecture. It is not uncommon for financial sector agencies to have multiple policy objectives. Most often the policy objectives for these agencies reflect prudential, conduct and financial stability policy objectives. In some cases, financial sector agencies are also allocated responsibility for enhancing competition and innovation. When it comes to fintech, countries differ to some extent in the manner they balance the objectives of promoting the development of fintech and regulating it. Countries see fintech as a means of achieving multiple policy objectives sometimes with lesser or greater degrees of emphasis, such as accelerating development and spurring financial inclusion, while others may support innovation with the objective of promoting competition and efficiency in the provision of financial services. This difference in emphasis may impact institutional structures, including the allocation of staff resources. Conflicts of interest arising from dual roles are sometimes managed through legally established prioritization of objectives or establishment of separate internal reporting lines for supervision and development.

www.imf bookstore.org DISCLAIMER: Fintech Notes offer practical advice from IMF staff members to policymakers on important issues. The views expressed in Fintech Notes are those of the author(s) and do not necessarily represent the views of the IMF, its Executive Board, or IMF management.

DISCLAIMER: Staff Discussion Notes (SDNs) showcase policy-related analysis and research being developed by IMF staff members and are published to elicit comments and to encourage debate. The views expressed in Staff Discussion Notes are those of the author(s) and do not necessarily represent the views of the IMF, its Executive Board, or IMF management.

Ukraine, the United Kingdom, and the United States for helpful suggestions. The authoring team is also grateful to Tobias Adrian, Aditya Narain, and Miguel Savastano for providing intellectual direction, and to Thais Ferreira and Mireille Nsanzimana for excellent support to the project.The Departmental Paper Series presents research by IMF staff on issues of broad regional or crosscountry interest. The views expressed in this pape are those of the author(s) and do not necessarily represent the views of the IMF, its Executive Board, or IMF management.

This paper highlights the emerging supervisory practices that contribute to effective cybersecurity risk supervision, with an emphasis on how these practices can be adopted by those agencies that are at an early stage of developing a supervisory approach to strengthen cyber resilience. Financial sector supervisory authorities the world over are working to establish and implement a framework for cyber risk supervision. Cyber risk often stems from malicious intent, and a successful cyber attack—unlike most other sources of risk—can shut down a supervised firm immediately and lead to systemwide disruptions and failures. The probability of attack has increased as financial systems have become more reliant on information and communication technologies and as threats have continued to evolve.

No abstract