Go to menu Go to main content
Autorité des marchés financiers - Home - General Public
Français
  • Follow us on Linkedin This link will open in a new window
  • Facebook This link will open in a new window
  • Follow us on Instagram This link will open in a new window
  • Follow us on X This link will open in a new window
  • Follow us on Youtube This link will open in a new window
  • General public
  • Professionals Individuals and firms in the financial sector, Fintech , current section
    • Insurers
    • Representatives
    • Firms, independent representatives and partnerships
    • Deposit institutions and Trust companies , current sub-section
    • Securities and derivatives
    • Market structures
    • Regulations and obligations
  • Becoming a professional Exams, probationary period, right to practise, trainers
  • Other AMF mandates Credit assessment agents, Transparency Measures, VRSPs
  • Professionals
  • Deposit institutions and Trust companies
  • Guidelines
  • Operational risk
  • Guideline on Information and Communications Technology Risk Management , current page

Guideline on Information and Communications Technology Risk Management

Autorité des marchés financiers - Home - General Public
  • General public
    • Insurance
    • Investments
    • Personal finances
    • Fraud prevention
    • Calculators and tools
    • Assistance and Complaints
    • Compensation and Deposit protection
  • Professionals
    • Insurers
    • Representatives
    • Firms, independent representatives and partnerships
    • Deposit institutions and Trust companies
    • Securities and derivatives
    • Market structures
    • Regulations and obligations
  • Becoming a professional
    • Insurance of persons
    • Damage insurance
    • Claims adjustment
    • Mortgage brokerage
    • Financial planning
    • Securities
    • Trainers
  • Other AMF mandates
    • Credit assessment agents
    • VRSP – Voluntary Retirement Savings Plan
    • Transparency Measures - Mining, oil and gas
    • E-Services
  • About the AMF
  • Media Centre
  • Publications
  • Registers
  • Regulations and obligations
  • Public consultations
  • Enforcement
  • Youth and Teacher Zone
Français
  • Follow us on Linkedin This link will open in a new window
  • Facebook This link will open in a new window
  • Follow us on Instagram This link will open in a new window
  • Follow us on X This link will open in a new window
  • Follow us on Youtube This link will open in a new window
  • Professionals
  • Deposit institutions and Trust companies
  • Guidelines
  • Operational risk
  • Guideline on Information and Communications Technology Risk Management , current page

Guideline on Information and Communications Technology Risk Management

Also in this section
  • Deposit institutions and Trust companies , current section
    • Guidelines , current sub-section
      • Foundations of prudential oversight
      • Capital and liquidity
      • Commercial Practices
      • Credit, market and insurance risk
      • Operational risk , current sub-section
      • Use of models
    • Disclosures
    • Right of practise - Trust compagnies
      • Authorization to carry on trust company activities in Québec
      • Review for the withdrawal of a condition or restriction
      • Voluntary revocation of authorization
      • Authorization to grant a hypothec or other security on movable property
    • Right of practise - Deposit Institutions
      • Authorization to carry on deposit institution activities in Québec
      • Review for the withdrawal of a condition or restriction
      • Voluntary revocation of authorization
      • Permission to grant a hypothec or other security on movable property
    • Supervisory Framework
    • Obligations of authorized deposit institutions
    • Standardized Climate Scenario Exercise (SCSE)
    • Approval framework for financial services cooperatives
    • Information Security Incident Management
  • Deposit institutions and Trust companies
    • Guidelines , current section
      • Foundations of prudential oversight
      • Capital and liquidity
      • Commercial Practices
      • Credit, market and insurance risk
      • Operational risk , current sub-section
      • Use of models
    • Disclosures
    • Right of practise - Trust compagnies
    • Right of practise - Deposit Institutions
    • Supervisory Framework
    • Obligations of authorized deposit institutions
    • Standardized Climate Scenario Exercise (SCSE)
    • Approval framework for financial services cooperatives
    • Information Security Incident Management

The Guideline on Information and Communications Technology Risk Management is intended to ensure that financial institutions implement security hygiene measures related to the use of technology, in order to prevent and limit the impact of major incidents.

Guideline in effect

  • Guideline on information and communications technology risk management (pdf - 242 KB)This link will open in a new windowFebruary 2020

Share

  • Share the page by e-mail, This link will open in a new window
  • Share the page on LinkedIn, This link will open in a new window
  • Share the page on Facebook, This link will open in a new window
  • Share the page on X, This link will open in a new window
  • About the AMF
  • Media Centre
  • Publications
  • Registers
  • Regulations and obligations
  • Public consultations
  • Enforcement

Contact us

Québec City: 418 525-0337
Montréal: 514 395-0337
Toll-free: 1 877 525-0337

No need to wait on the phone!

One of our agents will be pleased to return your call.

Use the call back feature

Make an appointment by phone

Request for information

Client services

You want to:

  • Make a complaint
  • Report fraud or a suspicious situation
  • Make a comment
  • File a claim

Assistance and Complaints

Compensation claim

  • Careers at the AMF
  • Subscribe to E-mail Info
  • Use our Financial Glossary
  • Useful links
  • Financial Education Experts
  • AMF Strategic Financial Education, Outreach and Research Partnerships Program
© 2026, Autorité des marchés financiers. All rights reserved
  • Access to Information
  • Sitemap
  • Accessibility
  • Privacy Policy
  • Cookies
  • Terms of use
  • Who can consult this page