ABS revamps cloud outsourcing guide for banks

One revision guides the categorisation of material and non-material cloud outsourcing contracts.

The Association of Banks in Singapore (ABS) has updated the Cloud Computing Implementation Guide to take account for technological advancements and market practice evolutions.

First published in 2016, financial institutions (FIs) are required to adopt the guide when they enter into cloud outsourcing arrangements.

Revisions reportedly include key characteristics to guide the categorisation of material and non-material cloud outsourcing arrangements; enhanced guidance for due diligence assessment on cloud service providers (CSPs), which are in line with the ABS Guidelines on Control Objectives and Procedures for Outsourced Service Providers (OSPs) as well as the OSP Audit Report (OSPAR); approaches and considerations for governing, designing, securing and running the cloud; and finally, comprehensive considerations and controls specifically for securing material versus standard workloads, including considerations for critical workloads.

According to the ABS, the revised guide is the result of 18 months of research and three months of cross industry consultation with CSPs, FIs and the Monetary Authority of Singapore. Three hundred and sixty-five pieces of feedback were reportedly reviewed and discussed by affected parties in plenary sessions.

“As one of the top financial hubs in the region, it is crucial that the financial industry seizes the cost and risk reduction opportunities offered by cloud computing services. The partnership with CSPs would also strengthen the technology and operational resilience of individual institutions as cloud infrastructure scales on demand to support fluctuating workloads,” said Ong–Ang Ai Boon, director of ABS.

Join Singapore Business Review community
A NOTE FROM SINGAPORE BUSINESS REVIEW

The people you want to reach are already in this room.

Every quarter, SBR lands on the desks of the founders, CFOs, and directors running Asia's most consequential companies. Every day, they open our newsletter and read our website. It's a room that took twenty years to build — and it's the one most of our partners are trying to get into.

The good news is that the door is open. We work with companies on thought leadership articles, sponsored content, industry summits across Southeast Asia, regional awards programmes, podcasts, and media placements in print and digital. The shape of the right partnership depends on what you're trying to do, which is why we'd rather start with a conversation than send a rate card.


If you have something this room should know about, tell us. We'll tell you honestly whether we can help, and how.

No rate cards until we understand the brief. It's a better use of everyone's time.