Risk ManagementCanada
OSFI B-13
Canadian OSFI Technology and Cyber Risk Management guideline.
Domains
OSFI B-13: Information Security Governance
OSFI B-13: Operational Resilience
OSFI B-13: Third-Party Risk Management
OSFI B-13: Incident Management & Reporting
OSFI B-13: Cybersecurity Controls
Compare OSFI B-13
OSFI B-13 by Industry
OSFI B-13 by Role
Frequently Asked Questions
What is OSFI B-13?
Canadian OSFI Technology and Cyber Risk Management guideline.
How many controls does OSFI B-13 have?
OSFI B-13 contains 25 controls organized across 5 domains.
Where does OSFI B-13 apply?
OSFI B-13 is applicable in Canada. Organizations operating in or serving customers in this jurisdiction should evaluate its requirements.
What frameworks does OSFI B-13 map to?
OSFI B-13 has control-to-control mappings with 523 other compliance frameworks in our database. Use our compliance platform to explore these mappings interactively.
How do I get started with OSFI B-13 compliance?
Start by understanding the framework's key controls and domains. Our compliance platform provides AI-powered gap analysis and mapping tools to help you assess your current posture and build a remediation plan.
How ready are you for OSFI B-13?
Answer 25 questions and get a professional readiness report with gap analysis, maturity scores, and prioritised action items. Results in 5 minutes.