Guidance library
As the regulator for federally regulated financial institutions and private pension plans, we set expectations for operating within the Canadian financial industry. You can find our current guidance in the following list. We also have a list of rescinded guidance.
For guidance on private pension plans, please see Administering pension plans.
How to use this list
You can search by using one or more of the filters. The more filters you use, the narrower your search.
The “keywords” filter will search page titles and content. For example, you can search by the guideline number (such as B-10).
Alternatively, learn how our guidance relates to our mandate.
| Date | Title | Sector | Publication type | Category |
|---|---|---|---|---|
| OSFI’s Intelligence-led Cyber Resilience Testing (I-CRT) Framework |
|
Advisory | Sound Business and Financial Practices | |
| OSFI releases final Guideline B-13 – Technology and Cyber Risk Management - Letter (2022) |
|
Letter | Prudential Limits and Restrictions | |
| OSFI technology and cyber incident report – Detailed instructions |
|
Instructions | ||
| Technology and Cyber Risk Management |
|
Guideline | Sound Business and Financial Practices | |
| Technology and Cyber Security Incident Reporting |
|
Advisory | Supervisory Advisories | |
| Technology and cyber risk management self-assessment tool |
|
Assessment tool | Sound Business and Financial Practices | |
| Third-Party Risk Management Guideline |
|
Guideline | Sound Business and Financial Practices | |
| Technology and cyber incident reporting | Letter | Supervisory Advisories | ||
| Integrity and Security - Guideline |
|
Guideline | Sound Business and Financial Practices | |
| Operational Risk Management and Resilience – Guideline |
|
Guideline | Sound Business and Financial Practices | |
| Capital Treatment of Crypto-asset Exposures (Insurance) – Guideline |
|
Guideline | Capital Adequacy Requirements | |
| Capital and Liquidity Treatment of Crypto-asset Exposures (Banking) – Guideline (2027) |
|
Guideline | Capital Adequacy Requirements, Liquidity Adequacy Requirements | |
| Capital and Liquidity Treatment of Crypto-asset Exposures (Banking) – Guideline (2026) |
|
Guideline | Capital Adequacy Requirements, Liquidity Adequacy Requirements | |
| Consequential amendments to Guidelines B-10 and B-13 related to foreign branches |
|
Letter | Sound Business and Financial Practices | |
| Regulatory notice on using natural catastrophe bonds in the Minimum Capital Test guideline |
|
Regulatory notice | Capital Adequacy Requirements | |
| Guideline E-23 – Model Risk Management (2027) |
|
Guideline | Sound Business and Financial Practices |