OSFI B-13 Technology and Cyber Risk Management (Canada) Corporate Training
Master OSFI Guideline B-13 with instructor-led corporate training built for Canadian financial teams.
This program helps your team learn, develop, and build the technology and cyber risk skills OSFI Guideline B-13 demands of federally regulated financial institutions. Across hands-on labs, employees map the three B-13 domains, test cyber controls, and assess third-party technology risk. As a corporate training company serving regulated teams, Edstellar tailors every cohort to the systems and vendors your employees own.
Instructor-led group trainingVirtual / on-site / off-site10 languagesDelivered inEnglish, Spanish, Mandarin, German, Arabic, Portuguese, Hindi, French, Japanese, Italian100+ countriesWe have delivered inUnited States, United Kingdom, India, Canada, Germany, France, Netherlands, UAE, Saudi Arabia, Singapore, Australia, Japan, Brazil, South Africa and 90+ more countries
How we build a resilient, audit-ready team
EDSTELLAR TECHNOLOGY & CYBER RISK CAPABILITY MODEL
Assess B-13 capability
Skill checks map your team's B-13 knowledge, cyber control, and resilience baseline.
Set shared standards
One shared playbook for technology risk controls, evidence, and reporting.
Practice in guided labs
Labs cover resilience planning, cyber controls, and vendor risk scoring.
Measure the lift
Readiness scoring benchmarks each employee's B-13 control capability.
Scale across teams
One standard rolls out across business units, regions, and cohorts.
Need more than one program?Get a group quote
Trusted as a Leading Corporate Training Provider by
Program Overview: What is OSFI B-13 Technology and Cyber Risk Management (Canada)?
OSFI B-13 Technology & Cyber Risk Management (Canada) is a 25-hour program for risk, compliance, audit, technology, and cyber teams at Canadian financial institutions. It covers Guideline B-13 expectations across technology operations, resilience, cyber controls, third-party risk, and incident reporting. Participants learn what audit-ready B-13 compliance actually looks like in practice.
Training combines regulator-aligned briefings with scenario-based workshops led by instructors who know Canadian financial supervision. Participants assess technology operations, probe cyber security controls, and evaluate third-party arrangements against B-13 requirements. Instructor coaching guides each team through incident reporting and audit readiness exercises. The capstone is a full B-13 readiness assessment, conducted under instructor supervision.
Canadian institutions face intense OSFI scrutiny, and gaps in technology or cyber risk controls can trigger costly supervisory action. This program teaches teams to interpret B-13 correctly, close control gaps, and document readiness before examiners arrive. Compliance shifts from anxious scrambling to calm, evidence-backed confidence.
The capstone readiness assessment is the point: each team produces a structured B-13 gap analysis of a realistic institution profile, with prioritized remediation mapped to the guideline's expectations. Participants keep that assessment framework as a working tool, so the next time OSFI schedules a review, the organization has a practiced method rather than a panic.
Enhance capability across the full B-13 scope. Employees upskill from foundations to a capstone readiness assessment, building collaboration between risk, compliance, technology, and audit. The program's focus on real controls, real evidence, and measurable readiness gives each cohort a clear path from training needs to confident practice.
What's Included in this Workshop for Your Enterprise Teams
- 1
Foundations session
Map the B-13 domains to your control environment.
- 2
Resilience labs
Draft recovery playbooks for core systems.
- 3
Cyber control labs
Test identity, network, and monitoring controls.
- 4
Vendor risk labs
Score third parties and draft remediation terms.
- 5
Capstone assessment
Deliver a readiness roadmap with instructor review.
- Instructor-led sessions in a hybrid format
- Six guided hands-on labs plus a capstone assessment
- Customized scenarios for your systems and vendors
- Lab guides, control templates, and evidence checklists
- Readiness scoring before and after the program
- Flexible scheduling around your team's operations
Build your team's skills. Anywhere in the world.
Real-world use cases
from day one
Instructor-led training
for your teams
Delivered globally
in 100+ countries
Enterprise Training Solutions Customized for Your Company
One partner for instructor-led corporate training, delivered the way your teams work.
Request a Training Quote- Customized Training Delivery
- Scale Your Training: Small to Large Teams
- In-person Onsite, Live Virtual or Hybrid Training Modes
- Plan from 2000+ Industry-ready Training Programs
- Hands-On Labs on Live Infrastructure, Led by Industry Experts
OSFI B-13 Technology and Cyber Risk Management (Canada) Course Topics and Program Outline
A tailored 25-hour, six-module workshop: one learning journey from OSFI B-13 foundations to a capstone readiness assessment. Sessions pair concepts with hands-on labs on real-world use cases. Materials include lab guides, templates, and a capstone review.
Built by Edstellar with financial-sector technology risk practitioners
Built by practitioners who run technology and cyber risk programs inside regulated financial institutions, shaped around your stack and use cases.
Baseline checks map your team's OSFI B-13 knowledge and technology risk maturity before the program begins.
Instructor-led sessions build B-13 foundations across technology operations, cyber controls, and third-party risk.
Guided labs on monitoring, vendor scoring, and tabletop incidents turn controls into repeatable team practice.
Your team completes a capstone readiness assessment with a remediation roadmap for your real environment.
From B-13 foundations to a capstone readiness assessment, every lab builds your team's audit readiness.
Delivered as
Delivered as a hybrid program of live instruction and guided labs, scheduled around your team's operations.
Map the three B-13 domains to a sample organization chart and control inventory.
learna)OSFI mandate and supervision of federally regulated financial institutions
b)Guideline B-13 structure and the three technology risk domains
c)Technology risk, cyber risk, and resilience defined
d)Proportionality: expectations by size, complexity, and risk profile
e)How B-13 connects with other OSFI technology guidance
Draft a resilience playbook for a core banking system outage scenario.
learna)Technology operations management and governance
b)Data management, integrity, and protection
c)Resilience planning and disaster recovery
d)Change management and release controls
e)Capacity and performance management
Triage a simulated phishing-led intrusion in a guided monitoring exercise.
practicea)Designing a cyber security control program
b)Identity, access, and privileged account controls
c)Network segmentation and endpoint protection
d)Vulnerability management and secure patching
e)Security monitoring and response operations
Score a vendor risk assessment and draft remediation clauses.
practicea)Third-party risk identification and tiering
b)Due diligence and contractual control requirements
c)Cloud and outsourced service oversight
d)Concentration and supply chain risk
e)Ongoing monitoring, testing, and exit planning
Run a tabletop incident and draft the reporting timeline and evidence index.
applya)Incident classification and severity assessment
b)OSFI technology and cyber incident reporting expectations
c)Business continuity and resilience testing
d)Self-assessment against Guideline B-13
e)Building the audit evidence pack
Complete the end-to-end readiness assessment with instructor review.
applya)Scope the assessment across the three B-13 domains
b)Gather and evaluate control evidence
c)Identify gaps and rate residual risk
d)Build the remediation roadmap with owners and timelines
e)Present findings to a mock review panel
Customize this program tailored to your team?
Tell us your training needs: what your team already works with, the level they’re at, and the topics you want them to focus on. We’ll adjust the modules, duration and hands-on labs, and send you a customized outline for your group.
Key Skills and Outcomes Your Team Will Gain
Competency your team can evidence: every skill below is practiced in a lab and reviewed by the instructor.
Interpret Guideline B-13
Map the technology, cyber, and third-party domains to your control environment.
Plan technology resilience
Draft recovery playbooks that meet B-13 resilience expectations.
Test cyber security controls
Validate identity, network, and monitoring controls in guided labs.
Assess third-party risk
Score vendors and draft contractual remediation terms.
Run incident response drills
Classify incidents and practice OSFI reporting timelines.
Self-assess against B-13
Run a structured self-assessment across all three domains.
Build the evidence pack
Assemble audit-ready control evidence with clear ownership.
Teams that Benefit from this OSFI B-13 Technology and Cyber Risk Management (Canada) Group Training
Groups across risk, compliance, technology, and audit each get cohort-specific labs. Content adapts to role and experience so each cohort practices the workflows it owns.
Sharpen enterprise technology risk oversight
Risk teams gain a working command of B-13's three domains so they can challenge, rate, and report technology risk with confidence.
Workflow friction
- B-13 text reads abstract without examples
- Control maturity is hard to evidence
- Risk reporting lacks a common language
How the program helps
- Map B-13 domains to your risk taxonomy
- Rate control maturity with clear criteria
- Report technology risk to the board clearly
Practice use cases
- Domain mapping
- Maturity rating
- Risk reporting
Evidence every B-13 expectation your teams own
Compliance and legal teams learn exactly what OSFI expects to see, and how to document it so obligations survive scrutiny.
Workflow friction
- Obligations span three dense domains
- Evidence is scattered across teams
- Reviews arrive with short timelines
How the program helps
- Trace obligations to B-13 clauses
- Build defensible compliance documentation
- Prepare for supervisory review with ease
Practice use cases
- Obligation tracing
- Documentation
- Review prep
Harden controls and prove resilience in labs
Technology and cyber teams turn B-13 principles into working controls, tested in labs against realistic failure and attack scenarios.
Workflow friction
- Controls drift from documented design
- Resilience is rarely tested end to end
- Patching lags behind threat timelines
How the program helps
- Implement controls the B-13 way
- Test resilience before regulators do
- Tighten monitoring and patching routines
Practice use cases
- Control hardening
- Resilience testing
- SOC routines
Test controls with an auditor's lens
Audit teams build a repeatable B-13 testing approach, from scoping and evidence requests to findings that drive remediation.
Workflow friction
- B-13 scope keeps expanding
- Evidence quality varies by team
- Findings need stronger follow-through
How the program helps
- Scope B-13 audits with precision
- Request evidence that proves control design
- Write findings that drive real fixes
Practice use cases
- Audit scoping
- Evidence testing
- Findings follow-up
Each cohort works the B-13 domains it owns, with labs tuned to its tools and mandate.
Prerequisites: Teams benefit most when participants work in risk, compliance, audit, technology, or cyber functions at a Canadian financial institution. Familiarity with IT operations or control frameworks helps but is not required. No prior OSFI experience is needed. Each cohort's labs adapt to the systems, vendors, and reporting lines the team actually owns.
Risk analyst to technology risk lead
A learning path that takes analysts from B-13 foundations through guided control testing to a capstone readiness assessment.
One program that grows with technology risk careers, from B-13 basics to confident readiness assessments.
Mixed cohort, or several teams at once?
We can tailor the training to different teams, roles, and experience levels within the same program.
Certificate of Training Completion.
On successful completion, employees receive an Edstellar course completion certificate, recognizing their commitment to ongoing learning and professional development. It validates the skills they have built and motivates them to keep growing and contribute to organizational success.
Earned, not attended. Awarded on completion of all hands-on labs and the capstone project.
Training Delivery Modes: Virtual, Onsite and Hybrid
Choose the format that fits your teams. Hybrid is the recommended format for this hands-on technical program.
Hybrid Training
The recommended format for this technical program: live instructor-led sessions combined with guided hands-on labs, delivered across your sites and remote teams.
- Live instructor-led sessions with guided labs
- Same cohort across office and remote learners
- Lab environments provided for every module
- Scheduling flexes around your team's operations
Onsite Training
Delivered at your offices for teams that want everyone in one room. The instructor runs sessions and labs on your schedule.
- Instructor at your office for the full program
- Labs run in provided cloud environments
- Scenarios tuned to your systems and vendors
- One cohort, one schedule, full focus
Live Virtual Training
Live virtual training over Zoom or Teams for distributed teams. Every lab is guided live by the instructor with breakout support.
- Live virtual sessions with real-time guidance
- Guided labs with instructor breakout support
- Zoom or Teams delivery for any location
- Recordings and materials shared after sessions
Need a training format that works for your team?
Full days, half days across weeks, or split by module. Tell us the delivery window and we schedule the cohort around it.
Frequently Asked Questions
Share your team size and preferred dates through the request form, and we will send a tailored quote with batch options.
Yes. A short discovery call with a training advisor maps your B-13 goals before we finalize the training plan.
Yes. Live virtual delivery over Zoom or Teams includes every guided lab, with instructor breakout support throughout.
Yes. Onsite delivery brings the instructor to your offices, with lab environments provided for every module.
The program runs 25 hours across six modules, typically scheduled over four to five days to suit your teams.
Question not answered here?
Put it in the request. A training specialist answers it directly, within one business day.
Where this Training Fits in Your Team's learning path.
OSFI Guideline B-13 builds on a working cyber risk process, applying it to the technology and cyber expectations for Canadian federally regulated financial institutions. After B-13, your team strengthens wider operational resilience and manages the third-party and cloud risks the guideline also touches.
Why Choose Edstellar as Your OSFI B-13 Technology and Cyber Risk Management (Canada) Training Provider
Edstellar is the training partner regulated teams compare against: practitioner-led, lab-driven, and measured on readiness outcomes.
EXPERT TRAINERS
YEARS DELIVERING
ORGANIZATIONS TRAINED
CERTIFIED
Tailored
Scenarios mirror your bank's systems and vendors, so every lab maps to the B-13 controls your teams own.
Proven Methodology
A Diagnose to Scale arc moves teams from baseline assessment to measurable audit readiness in 25 hours.
Practice-Based Learning
Six guided labs and a capstone readiness assessment turn B-13 theory into repeatable control evidence.
Expert Trainers
Practitioners from regulated financial technology teams lead every session and review each capstone.
Global Scale
One standard program rolls out across business units, regions, and cohorts without losing consistency.
Measurable Outcomes
Readiness scoring before and after shows exactly where technology and cyber controls improved.
Connect B-13 Technology Risk Reviews With Resilience and Control Evidence
Edstellar develops technology-risk assessment skills through the Canadian financial-services scenarios in the B-13 curriculum. Participants map responsibilities, examine resilience and cyber controls, and assess vendors before rehearsing incident reporting. The final readiness assessment is reviewed for traceable evidence, supported conclusions, and a coherent sequence of remediation priorities.
- Step 01
Consult
We explore technology, cyber, and oversight responsibilities to identify gaps in B-13 interpretation, resilience planning, vendor assessment, incident records, and evidence review.
- Step 02
Plan
We establish guideline foundations before technology resilience and cyber controls, then connect third-party risk and reporting exercises in the complete readiness assessment.
- Step 03
Align
We align financial-services technology risk expertise with risk, audit, compliance, and IT teams, calibrating exercises to the systems, vendors, and reporting lines they oversee.
- Step 04
Customize
Fictional core-system outages, intrusion alerts, and vendor profiles reflect relevant risks, enabling tailored playbook and evidence exercises without exposing actual customer or security records.
- Step 05
Execute
Participants map control owners, rehearse outage and intrusion scenarios, and assemble incident evidence, receiving feedback on resilience assumptions, vendor findings, and reporting consistency.
- Step 06
Evaluate
We assess the readiness review for clear responsibility mapping, supported technology and supplier findings, coherent response documentation, and remediation priorities tied to the evidence gaps.
Also from Edstellar
Talent assessments
Psychometric, behavioral, leadership and 360-degree assessment.
→Training needs analysis
Needs analysis, gap identification, and a training roadmap.
→L&D consulting
Learning strategy, content, technology and ROI measurement.
→OD consulting
Org design, succession planning and cultural change.
→Managed training services
Training outsourcing, vendor management, logistics and administration.
→Coaching solutions
Executive and manager coaching that keeps skills in use.
Start an RFP shaped to your needs.
Answer three quick questions about team size, scope, and how often you need the program run, then send the request from the last step. Everything you choose travels with it, so you only fill this in once.
How many team members need training?
OSFI B-13 Technology & Cyber Risk Management (Canada) Training Training Packages & Pricing
Where L&D holds an annual budget, license packages price the whole year at once instead of raising a purchase order per workshop. Hours and licenses are pooled across teams, programs and locations, so unused capacity is not stranded in one department.
Starter
120
trainee licenses64 hours of group training
Tailored for SMBs
Growth
320
trainee licenses160 hours of group training
Ideal for growing SMBs
Enterprise
800
trainee licenses400 hours of group training
Designed for large corporations
Custom
Unlimited
trainee licensesDuration set by the rollout
Multi-region and multi-year
Training Packages & Pricing
Choose the training format that works for your team. Pricing is customized based on your requirements, cohort size, and delivery needs.
Request OSFI B-13 Technology and Cyber Risk Management (Canada) Training for Your Team
Tell us about your teams and timeline. We will confirm availability, share a tailored training plan, and schedule a discovery call.