OSFI guidelines
Guidelines issued by Canada’s Office of the Superintendent of Financial Institutions setting prudential expectations for federally regulated financial institutions.
Overview
OSFI guidelines cover capital, liquidity, corporate governance, technology and cyber risk, third-party risk and more. Although guidance, they are applied as firm expectations in supervision.
As guidance it may not be binding on its own, but examiners and enforcement staff routinely apply it. The authorities most closely connected to it are OSFI.
Check the official sources below for legal scope, applicable dates and exceptions. This entry is an explanatory reference, not legal advice.
Why it matters
Guidance shows how the authority will judge compliance, so it shapes examinations even when it is not formally binding.
Who it affects
Organisations supervised by OSFI.
Where it sits
Ten linked steps connect where you operate to the proof that you complied.
- 01Jurisdiction
- 02Industry
- 03Activity
- 04Authority
- 05Regulation
- 06Requirement
- 07Guidance
- 08Control
- 09Evidence
- 10Enforcement
Connections
The terms most closely tied to OSFI guidelines. Select one to open it.
What to do about it
- 1Identify which obligations it interprets.
- 2Compare it with how your controls work today and draft changes.
- 3Record the decision and the reasoning behind it.
- 4Watch for updates, replacement or withdrawal.
From requirement to evidence.
Regulation Layer tracks it as layer three and drafts an impact note for every control a new item touches.
Request early access →