-level summaries of the assistance provided to IMF capacity development recipients, describing the high-level objectives, findings, and recommendations. ABSTRACT: Central Bank of Trinidad and Tobago requested for technical assistance to: (i) strengthen the cybersecurity posture of the Central Bank, and (ii) strengthen the cybersecurity of the financial institutions. The mission provided support in a project aimed at enhancing its cybersecurity posture focusing on governance and Identity and Access Management (IAM), provided guidance in drafting a guideline applicable to
a project aimed at enhancing its cybersecurity posture focusing on governance and Identity and Access Management (IAM), providing guidance in drafting a guideline applicable to financial institutions, conducting a seminar on regulations, and assessing the supervisory capacity. Summary of Findings Cybersecurity governance at CBTT is set up according to generally accepted practices with recently updated policies and procedures. Information Technology (IT) governance responsibilities comingled with the second line of defense, resource constraints, information
recovery using the offsite resources as far as possible. More disruptive tests could be considered after gaining experience, whereby the data center is shut down. Such tests will require extensive preparation and planning and will typically be performed less frequently. V. Identity and Access Management Project A. Assessment 39. The IAM project is set up according to good project management practices. There is a project charter in place, which documents the goals, stakeholders, sponsors, outline, and deliverables for Phase 1. A project plan is available