- Audit against MAS expectations – assess clients’ technology and cyber risk practices against the MAS Technology Risk Management (TRM) Guidelines and relevant Notices (e.g. MAS Notice 655 / Cyber Hygiene), identify gaps, and judge what regulators will care about






