Monetary Authority of Singapore Technology Risk Management Guidelines TRMN.7: Notice on TRM paragraph 7: notify MAS within 1 hour of discovering a relevant incident

The FI must notify MAS as soon as possible and no later than 1 hour after discovering a relevant incident (a system malfunction or IT security incident with severe and widespread impact on operations or material impact on customer service); for capital markets FIs, incidents already reportable under the named Securities and Futures regulations are carved out. Per the FAQs, discovery is when the FI ascertains the incident meets the criteria, the 1-hour clock is separate from the RTO clock, and attempted intrusions without such impact are not reportable.