Term · 28. International Regulations

MAS TRM (Monetary Authority of Singapore — Technology Risk Management Guidelines) MAS TRM

Standard Source: MAS TRM

Personal Data Identity Security PAM Standards MAS TRM

Definition

Singapore central bank's prescriptive guidelines (revised 2021) for technology risk management at financial institutions. Covers IT governance, system resilience, cybersecurity, third-party risk, and identity & access management. Mandates MFA for privileged access, customer-facing strong authentication, secure cloud adoption, and incident response capabilities. Non-compliance can result in regulatory action and reputational risk.

Synonyms

MAS Notice 644
MAS Notice 655

Application: Mandatory for banks, insurers, capital markets intermediaries operating in Singapore. IDM/IAM impact: hardware tokens or biometric MFA for privileged access, strict customer authentication (typically Singpass MyInfo for KYC + device binding + transaction signing), centralized identity governance, regular access certification campaigns, PAM for production systems.

Sources

MAS — Technology Risk Management Guidelines primary source

Related terms

← Back to glossary · Open in main list