Source Document
MAS TRM Guidelines
MAS.TRM.2021.Sec14.4.1.p52.OBL1
14 Online Financial Services > 14.4 Customer Education and Communication > 14.4.1
Obligation Summary
The FI should inform customers of the security best practices that they should adopt when using online financial services.
Customers should be informed of the security best practices that they should adopt when using online financial services.
MAS TRM Guidelines, Section 14.4.1, p. 52 (2021) · Technology Risk Management Guidelines · p. 52
14.4 Customer Education and Communication
14.4.1 Customers should be informed of the security best practices that they should adopt when using online financial services. This includes the measures to take to secure their electronic devices that are used to access online financial services.
14.4.2 The FI should alert its customers on a timely basis to new cyber threats so that they can take precautionary measures.
What This Requires.
ProfytAI Regulatory Intelligence
Type: requirementThe FI should inform its customers of the security best practices they should adopt when using online financial services.
Relationship
This is a standalone provision under Section 14.4.1.p52 (Online Financial Services): it states a complete duty in its own sentence rather than implementing a broader governing clause.
Why This Exists
Customer behaviour is part of the attack surface of online services, so MAS expects FIs to equip customers with protective practices.
Implementation Considerations
Typically published security guidance across the FI's website, app and onboarding materials, refreshed as practices change.
Interpretation Note · The sentence is passive but the expectation sits with the FI as the party informing its customers, while the second should describes what customers are advised to do rather than a duty the FI can enforce on them. TRM is guidance; SHOULD is a MAS expectation.
This explanation is generated regulatory intelligence, traceable to the citation above.
The byte-exact verbatim text remains the authority you cite.
The captured source page, with this duty highlighted and stamped with its obligation ID, section, and page.
