Technology risk regulations across 15+ countries
A non-exhaustive index of technology and operational resilience expectations across major financial regulators.
What I cover here
This is an index page (non-exhaustive). It’s intentionally high-level and employer-safe. I’ll expand it country-by-country as separate posts.
Common themes
- Operational resilience / ICT risk management
- Third-party / outsourcing governance
- Logging, monitoring, incident reporting
- Identity, access, privileged controls
- Change management + secure configuration baselines
Initial coverage list
- US • UK • EU • Canada • Australia
- Singapore • Hong Kong • Japan • India • UAE
- Saudi Arabia • Switzerland • Brazil • South Africa • Mexico
No client specifics. No tracking. No cookies by default.
Artifacts (coming in v1)
- Short write-up + core checks
- Evidence expectations (inputs/outputs)
- “Failure modes” checklist
If you want code-first examples today, start with Python Encounters.
Collaborate
If you want to help make these notes more testable and reusable: share corrections, counterexamples, or suggest an artifact to build next.