Framework library · Malaysia

BNM RMiT

BNM RMiT — Risk Management in Technology. Published by Bank Negara Malaysia (BNM), version Policy document (28 Nov 2025). Kapālins maps it to 5 controls. 2 of 5 controls are proved by a live signal from the platform, and 3 by the assessment.

Read the source document

Controls mapped
RMIT-CYBERCybersecurity management & control measuresLive signal
RMIT-GOVBoard & senior management oversight of technology riskAssessment
RMIT-INCIDENTTechnology & cyber incident notification to BNMLive signal
RMIT-TPRMThird-party & cloud service provider riskAssessment
RMIT-TRMTechnology risk management frameworkAssessment

Live signal: a signal from the gateway, probes or device sensor proves it continuously. Assessment: it is evidenced by answers to the assessment. Both are exported in the regulator evidence pack.

History

How BNM RMiT got here.

  1. Adopted

    Bank Negara Malaysia issued a Policy Document on Risk Management in Technology. Allen & Gledhill

  2. Amended

    BNM issued a revised RMiT policy document, later superseded by the November 2025 version. Bank Negara Malaysia

  3. Amended

    BNM issued a revised RMiT policy document, effective 28 November 2025 unless stated otherwise. Bank Negara Malaysia

  4. Amended

    BNM issued an updated RMiT policy document; the effective date remains 28 November 2025. Bank Negara Malaysia

See this framework on your estateAll 29 frameworks