Abstract: As financial institutions move their operations, including core functions, to the cloud, financial regulators have begun to issue regulations and informal guidance addressing the use of cloud services in the financial sector. These are typically based on the regulator’s existing framework for outsourcing by a financial institution to third-party technology providers, under which the risks associated with outsourcing and the supervision of third-party providers are primarily the responsibility of the financial institution. This report provides background on the use of cloud computing in the financial sector, reviews existing regulatory and supervisory frameworks for cloud use by financial institutions, and recommends improvements to those frameworks that could reduce obstacles to more widespread cloud adoption by financial institutions.