This update discusses the joint communication on cloud computing and data offshoring and the key measures which financial institutions need to adopt to the confidentiality, integrity and availability of their data, information technology applications or systems.