OSFI cyber self-assessment

Also known as: CSAG, Cyber Security Self-Assessment, Cyber Security Self-Assessment Guidance, OSFI Self-Assessment Guidance, Technology and Cyber Risk Management Self-Assessment Tool

OSFI Technology and Cyber Risk Management Self-Assessment Tool — OSFI (Office of the Superintendent of Financial Institutions, Canada)

Official site Official change log

A voluntary questionnaire OSFI publishes so that a federally regulated financial institution can measure its own technology and cyber risk practices against the supervisor's expectations. It replaces the older Cyber Security Self-Assessment Guidance and is maintained alongside Guideline B-13, so the two move together.

Subscribe to OSFI cyber self-assessment (RSS)

Timeline

No changes recorded yet — we are watching, and nothing has been published.

Monitoring

Watched by 1 official source. Watching since 20 September 2026.