Based on technical assistance to central banks by the IMF’s Monetary and Capital Markets Department and Information Technology Department, this paper examines fintech and the related area of cybersecurity from the perspective of central bank risk management. The paper draws on findings from the IMF Article IV Database, selected FSAP and country cases, and gives examples of central bank risks related to fintech and cybersecurity. The paper highlights that fintech- and cybersecurity-related risks for central banks should be addressed by operationalizing sound internal risk management by establishing and strengthening an integrated risk management approach throughout the organization, including a dedicated risk management unit, ongoing sensitizing and training of Board members and staff, clear reporting lines, assessing cyber resilience and security posture, and tying risk management into strategic planning.. Given the fast-evolving nature of such risks, central banks could make use of timely and regular inputs from external experts.

This paper discusses the impact of the rapid adoption of artificial intelligence (AI) and machine learning (ML) in the financial sector. It highlights the benefits these technologies bring in terms of financial deepening and efficiency, while raising concerns about its potential in widening the digital divide between advanced and developing economies. The paper advances the discussion on the impact of this technology by distilling and categorizing the unique risks that it could pose to the integrity and stability of the financial system, policy challenges, and potential regulatory approaches. The evolving nature of this technology and its application in finance means that the full extent of its strengths and weaknesses is yet to be fully understood. Given the risk of unexpected pitfalls, countries will need to strengthen prudential oversight.

Cyber risk has emerged as a key threat to financial stability, following recent attacks on financial institutions. This paper presents a novel documentation of cyber risk around the world for financial institutions by analyzing the different types of cyber incidents (data breaches, fraud and business disruption) and identifying patterns using a variety of datasets. The other novel contribution that is outlined is a quantitative framework to assess cyber risk for the financial sector. The framework draws on a standard VaR type framework used to assess various types of stability risk and can be easily applied at the individual country level. The framework is applied in this paper to the available cross-country data and yields illustrative aggregated losses for the financial sector in the sample across a variety of scenarios ranging from 10 to 30 percent of net income.

FinTech is a major force shaping the structure of the financial industry in sub-Saharan Africa. New technologies are being developed and implemented in sub-Saharan Africa with the potential to change the competitive landscape in the financial industry. While it raises concerns on the emergence of vulnerabilities, FinTech challenges traditional structures and creates efficiency gains by opening up the financial services value chain. Today, FinTech is emerging as a technological enabler in the region, improving financial inclusion and serving as a catalyst for the emergence of innovations in other sectors, such as agriculture and infrastructure.

Cyber-attacks on financial institutions and financial market infrastructures are becoming more common and more sophisticated. Risk awareness has been increasing, firms actively manage cyber risk and invest in cybersecurity, and to some extent transfer and pool their risks through cyber liability insurance policies. This paper considers the properties of cyber risk, discusses why the private market can fail to provide the socially optimal level of cybersecurity, and explore how systemic cyber risk interacts with other financial stability risks. Furthermore, this study examines the current regulatory frameworks and supervisory approaches, and identifies information asymmetries and other inefficiencies that hamper the detection and management of systemic cyber risk. The paper concludes discussing policy measures that can increase the resilience of the financial system to systemic cyber risk.

This paper argues that nonfinancial risk management is an essential element of good governance of central banks. It provides a funnelled analysis, on the basis of selected literature, by (i) presenting an outline of central bank governance in general; (ii) zooming in on internal governance and organization issues of central banks; (iii) highlighting the main issues with nonfinancial risk management; and (iv) ending with recommendations for future work. It shows how attention for nonfinancial risk management has been growing, and how this has amplified the call for better governance of central banks. It stresses that in the area of nonfinancial risk management there are no crucial differences between commercial and central banks: both have people, processes, procedures, and structures. It highlights policy areas to be explored.

Effective risk management at central banks is best enabled by a sound framework embedded throughout the organization that supports the design and execution of risk management activities. To evaluate the risk management practices at a central bank, the Safeguards Assessments Division of the IMF’s Finance Department developed a tool that facilitates stocktaking of elements that are present and categorizes the function based on its maturity. Tailored recommendations are then provided to the central bank which provide a roadmap to advance the risk management function.