FINMA Circular 2023/1: A Guide for IT and Compliance Leaders
Stricter IT governance, cybersecurity and outsourcing requirements for Swiss financial institutions.
As of January 1, 2024, FINMA Circular 2023/1 introduces new standards that focus on the following:
✔ Greater accountability for IT governance and risk oversight at executive level
✔ Stronger controls over outsourcing and third-party relationships
✔ Stronger focus on operational resilience, requiring continuous security testing and monitoring

To support IT, security and compliance professionals in adapting to these new requirements, Deloitte, Alcatel-Lucent Enterprise and keyIT SA have collaborated on a practical whitepaper that provides clear insights and actionable strategies.
Learn More
What’s Inside the Whitepaper?
✔ Regulatory insights from Deloitte on compliance requirements, IT governance responsibilities and risk management considerations under FINMA Circular 2023/1.
✔ Technology perspectives from Alcatel-Lucent Enterprise on Zero Trust Architecture, network segmentation, Network Access Control (NAC), role-based access control (RBAC), and centralized security monitoring.
✔ Implementation guidance from keyIT SA on deploying resilient IT infrastructure, integrating network security solutions, and ensuring continuous compliance oversight to align with FINMA’s standards.
Who Should Read This Whitepaper?
This whitepaper is designed for professionals responsible for ensuring regulatory compliance, security and IT governance in financial institutions, including:
✔ IT and security professionals overseeing infrastructure, access controls, and security monitoring
✔ Risk and compliance officers responsible for ensuring adherence to FINMA’s regulatory requirements
✔ Technology leaders and decision-makers tasked with aligning IT operations with governance standards
Get the Whitepaper