minimum standards that financial service providers shall adopt to implement effective cybersecurity governance and risk management frameworks, taking into account increasing digitization, the evolving cyber-threat landscape, the growing sophistication of cyber incidents, and the need to enhance cyber resilience.