MAS outlines resilience standards for Singapore e-wallet providers
Singapore's financial regulator says e-wallet providers already face technology risk and business continuity expectations under the Payment Services Act 2019. The clarification comes in a written parliamentary reply addressing whether mandatory uptime, downtime and recovery standards apply to the sector.
Highlights
- MAS confirmed e-wallet service providers under the Payment Services Act 2019 must adhere to guidelines on technology risk management and business continuity management.
- MAS assesses the adequacy of resilience arrangements for operational continuity based on potential business and customer impact as part of ongoing supervision.
- No new prescriptive requirements for minimum redundancy or failover were introduced, as MAS considers existing oversight sufficient for core resilience in Singapore’s e-wallet sector.
Regulatory framework for service continuity
As reported by the Monetary Authority of Singapore, e-wallet service providers regulated under the Payment Services Act 2019 are subject to its guidelines on technology risk management and business continuity management, including system availability and service recovery time.The reply was issued in response to a parliamentary question from Mr Melvin Yong Yik Chye, Member of Parliament for Radin Mas SMC, who asked whether providers are subject to mandatory uptime, limits on unscheduled downtime and system recovery standards. He also asked whether MAS would consider prescribing minimum redundancy and failover requirements to strengthen service continuity.
Supervisory implications for payment firms
MAS said it assesses the adequacy of resilience arrangements with regard to the potential impact on businesses and customers, indicating that operational continuity remains part of its ongoing supervision of regulated payment firms.The response does not set out new prescriptive redundancy or failover rules, but it signals that existing supervisory oversight already covers core resilience expectations for Singapore's e-wallet sector.
Our earlier coverage of the Bank of England’s push for “bare metal” recovery planning explained why regulators want banks to be able to restore critical services even if primary technology systems are compromised. We noted that more complex, AI-amplified cyber threats are driving a shift from relying mainly on defences to requiring independent recovery options and end-to-end continuity planning for core financial services.
-
Afghanistan
-
Albania
-
Algeria
-
Angola
-
Argentina
-
Armenia
-
Australia
-
Austria
-
Azerbaijan
-
Bahamas
-
Bahrain
-
Bangladesh
-
Belarus
-
Belgium
-
Bolivia
-
Botswana
-
Brazil
-
Brunei
-
Bulgaria
-
Cambodia
-
Cameroon
-
Canada
-
Chile
-
China
-
Colombia
-
Congo
-
Costa Rica
-
Cote d'Ivoire
-
Croatia
-
Cuba
-
Cyprus
-
Czechia
-
DR Congo
-
Denmark
-
Dominican Republic
-
Ecuador
-
Egypt
-
El Salvador
-
Estonia
-
Eswatini
-
Ethiopia
-
Finland
-
France
-
Georgia
-
Germany
-
Ghana
-
Greece
-
Haiti
-
Hong Kong
-
Hungary
-
India
-
Indonesia
-
Iran, Islamic republic
-
Iraq
-
Ireland
-
Israel
-
Italy
-
Jamaica
-
Japan
-
Jordan
-
Kazakhstan
-
Kenya
-
Korea
-
Kuwait
-
Kyrgyzstan
-
Laos
-
Latvia
-
Lebanon
-
Lesotho
-
Libya
-
Lithuania
-
Luxembourg
-
Madagascar
-
Malaysia
-
Malta
-
Mauritius
-
Mexico
-
Moldova
-
Mongolia
-
Montenegro
-
Morocco
-
Mozambique
-
Myanmar
-
Namibia
-
Nepal
-
Netherlands
-
New Zealand
-
Nigeria
-
North Macedonia
-
Norway
-
Oman
-
Pakistan
-
Palestine
-
Panama
-
Papua New Guinea
-
Paraguay
-
Peru
-
Philippines
-
Poland
-
Portugal
-
Puerto Rico
-
Qatar
-
Reunion
-
Romania
-
Rwanda
-
Saudi Arabia
-
Serbia
-
Singapore
-
Slovakia
-
Slovenia
-
Somalia
-
South Africa
-
Spain
-
Sri Lanka
-
Sweden
-
Switzerland
-
Syria
-
Taiwan
-
Tajikistan
-
Tanzania
-
Thailand
-
Trinidad and Tobago
-
Tunisia
-
Turkey
-
UAE
-
Uganda
-
Ukraine
-
United Kingdom
-
United States
-
Uruguay
-
Uzbekistan
-
Venezuela
-
Vietnam
-
Yemen
-
Zambia
-
Zimbabwe
- Forex
- Crypto
