OSFI B-13 Cyber Insurance for Canadian Federally Regulated Financial Institutions

OSFI Guideline B-13 doesn't mandate cyber insurance — but it does reshape what a defensible program looks like. The four alignment points between B-13 governance and your cyber tower: board-approved risk appetite, 24-hour incident reporting capability, third-party technology dependency coverage, and Canadian regulatory defense including Quebec Law 25.