EY refers to the global organization, and may refer to one or more, of the member firms of Ernst & Young Global Limited, each of which is a separate legal entity. Ernst & Young Global Limited, a UK company limited by guarantee, does not provide services to clients.
Select your location
Local sites
Learn about the new cybersecurity standards in the revised GL20 by the Hong Kong Insurance Authority (IA). Download our PoV for key points to note.
In December 2024, the IA announced the release of its revised GL20, effective 1 January 2025. It sets the standard for cybersecurity in which the authorized insurer should have in place and the general guiding principles in assessing the effectiveness of authorized insurer’s cybersecurity framework.
Compared to the first version of GL20, effective from 1 January 2020, a Cyber Resilience Assessment Framework (CRAF) has been introduced in the revised GL20. CRAF provides a structured assessment framework to help authorized insurers assess inherent cybersecurity risks and the maturity level of their cybersecurity.
In this briefing paper, we explain the major revisions, the key points to note and critical actions to take for GL20. Download the paper now.
Download the Revision of Hong Kong Insurance Authority Guideline on Cybersecurity (GL20)
Summary
The revised GL20 establishes new cybersecurity standards and principles for authorized insurers. This guideline introduces the CRAF, which helps insurers evaluate inherent cybersecurity risks and maturity levels. Our briefing paper details the significant changes, essential points and necessary actions for compliance with GL20.
How EY can Help
-
Learn more about how organizations are accelerating transformation and strengthening cybersecurity at the same time.
Read more
Related articles
Unleashing the power of GenAI through managing cyber risks
Learn how to unlock the potential and power of GenAI while safeguarding against cyber threats and ensuring business continuity.
27 Nov 2024
Jeremy Pizzala
How can cybersecurity transform to accelerate value from AI?
With AI adoption across business functions booming, CISOs can reposition cybersecurity from the “department of no” to accelerators of AI value. Learn more.
01 May 2024
Richard Watson