This exposure draft establishes a risk-based cybersecurity framework and minimum baseline controls for deposit money banks and payment service providers. It addresses cybersecurity governance and board oversight, risk management, cyber resilience assessment, operational resilience, threat intelligence, metrics, monitoring, reporting, access control, secure system configuration, awareness…