meta_id 2940487

On March 6, 2026, the Gibraltar Financial Services Commission (GFSC) published its findings, observations and expectations from the thematic review on cybersecurity, data protection and resilience in the Trust and Corporate Service Providers (TCSPs) sector. The report highlights the following: The regulator’s expectations under Schedule 12 of the Gibraltar Financial Services Act 2019. Expectations, alongside good and poor practice examples across the following areas: Corporate governance oversight Cyber security, data protection and resilience frameworks Testing and assurance Technical controls (monitoring, logging & reporting) Training and awareness Corporate governance oversight Cyber security, data protection and resilience frameworks Testing and assurance Technical controls (monitoring, logging & reporting) Training and awareness