TVRA

TVRA (Threat and Vulnerability Risk Assessment) is a set of requirements issued by the Monetary Authority of Singapore (MAS) for all Singapore-based financial institutions with overseas physical presences. TVRA forms part of the Technology Risk Management Guidelines, aiming to deepen the finiacial institutions’ technology risk management capabilities and be ready to handle IT security incidents and system failures.

The MAS expects financial institutions to perform a TVRA on data centres in both Singapore and overseas, as long as the latter supports the financial institution’s Singapore operations.

At Evolution, we have successfully helped financial institutions as well as datacenters in the Asia Pacific region perform annual TVRA exercises, which help ensuring a high level of reliability, availability and recoverability of critical IT systems, as well as for the institutions to implement IT controls to protect customer information from