Free Workbook

The MAS TRM Readiness Workbook

MAS sets its technology risk expectations through two instruments that behave very differently. The Technology Risk Management Guidelines shape supervisory assessment; a MAS Notice creates a binding legal obligation. Almost every readiness exercise treats them as one thing and sequences its work accordingly, which is to say wrongly. This workbook separates them and walks the binding baseline, the notification clocks, governance evidence and the outsourcing file.

• The binding cyber hygiene baseline assessed measure by measure, with what evidences each and where coverage actually breaks
• The one-hour notification clock as an operational test, including whether your process works at 3am
• A worked material outsourcing file, including the audit and inspection rights clause that never survives being left to post-signature
• Governance artefacts and technology domain readiness, each with the question that finds the gap