EN 1090 vs MAS TRM
EN 1090
European standards for structural steel/aluminium execution and CE marking
MAS TRM
Singapore guidelines for technology risk management in finance
Quick Verdict
EN 1090 mandates CE marking for structural steel/aluminium in EU construction, while MAS TRM guides Singapore FIs on cyber resilience. Fabricators need EN 1090 for market access; banks adopt TRM to avoid fines and ensure operational stability.
EN 1090
Execution of steel and aluminium structures
Key Features
- Risk-based Execution Classes (EXC1-EXC4) scaling requirements
- Mandatory Factory Production Control (FPC) certification
- Enables CE marking under CPR for structural components
- Detailed technical execution rules for steel/aluminium
- Integrates ISO 3834 welding quality management
MAS TRM
MAS Technology Risk Management Guidelines
Key Features
- Board-level technology risk accountability
- Proportionality to FI risk profile
- Third-party service risk management
- Annual pen testing for internet systems
- Defence-in-depth cyber resilience controls
Detailed Analysis
A comprehensive look at the specific requirements, scope, and impact of each standard.
EN 1090 Details
What It Is
EN 1090 is a harmonized European standard family (EN 1090-1, -2, -3) for execution and conformity assessment of structural steel and aluminium components. It serves as the primary framework under the EU Construction Products Regulation (CPR), enabling CE marking for load-bearing metal components in construction. Its risk-based approach uses Execution Classes (EXC1-EXC4) to scale requirements based on failure consequences, service conditions, and production complexity.
Key Components
- **EN 1090-1Conformity assessment, Factory Production Control (FPC), Declaration of Performance (DoP).
- **EN 1090-2/-3Technical rules for steel/aluminium (materials, welding, tolerances, corrosion protection, NDT).
- Core principles: Traceability, welding via ISO 3834, inspection regimes.
- Certification model: Notified Body audits FPC with ongoing surveillance.
Why Organizations Use It
Mandated for EU market access; reduces liability, ensures safety. Benefits include risk mitigation, rework reduction, market credibility. Builds stakeholder trust via certified quality and traceability.
Implementation Overview
Phased: Gap analysis, FPC design, personnel training (e.g., Welding Coordinator), NB certification. Applies to fabricators in construction; 6-12 months typical for medium firms, involving audits and digital traceability.
MAS TRM Details
What It Is
MAS Technology Risk Management (TRM) Guidelines (January 2021) are supervisory guidelines from Singapore's Monetary Authority of Singapore (MAS). They establish a risk-based framework for financial institutions (FIs) to govern, control, and assure technology and cyber risks, emphasizing proportionality to risk profile and complexity.
Key Components
- Pillars: governance, asset management, secure SDLC, IT service management, resilience, access/cryptography, cyber operations, testing, audit (15 sections).
- Defence-in-depth approach preserving CIA triad.
- Principles: board accountability, independent oversight, continuous improvement.
- No certification; compliance via supervisory review and enforcement.
Why Organizations Use It
- Mandatory for MAS-regulated FIs to mitigate enforcement risks (fines, revocations).
- Enhances resilience, reduces systemic cyber threats.
- Supports ERM integration, digital transformation.
- Builds regulator, customer, stakeholder trust.
Implementation Overview
- Phased: governance setup, asset inventory, controls, testing, monitoring.
- Targets banks, insurers, fintechs in Singapore.
- Audit-focused; 12-24 months for maturity.
Key Differences
| Aspect | EN 1090 | MAS TRM |
|---|---|---|
| Scope | Execution and conformity of steel/aluminium structures | Technology and cyber risk management in finance |
| Industry | Construction, steel/aluminium fabrication, Europe | Financial institutions, Singapore regulated entities |
| Nature | Harmonized standard enabling CE marking, mandatory | Supervisory guidelines, proportionate enforcement |
| Testing | FPC certification, surveillance audits, NDT by notified bodies | Penetration testing, vulnerability assessments, cyber exercises |
| Penalties | Market exclusion, no CE marking, legal liability | Fines, license conditions, supervisory actions |
Scope
Industry
Nature
Testing
Penalties
Frequently Asked Questions
Common questions about EN 1090 and MAS TRM
EN 1090 FAQ
MAS TRM FAQ
You Might also be Interested in These Articles...
SEC Cybersecurity Rules Implementation Guide: Mastering Form 8-K Item 1.05 Materiality Determination and 4-Business-Day Reporting Workflow
Master SEC Form 8-K Item 1.05 compliance with step-by-step materiality assessment, incident workflows & Inline XBRL tagging. Beat the 4-business-day clock. Esse
NIST CSF 2.0 Plain English Decoder: Translating Govern, Supply Chain, and Core Functions from Jargon to Actionable Insights
Demystify NIST CSF 2.0 jargon with plain English tables for Govern, Supply Chain & Core Functions. Actionable steps for risk oversight & vendor management. Empo
Beyond the Burden: How Intuitive Compliance Software Transforms Daily Workflows
Explore intuitive compliance software that automates workflows, simplifies onboarding, and reduces stress. Cut non-compliance costs 3x and boost efficiency for
Run Maturity Assessments with GRADUM
Transform your compliance journey with our AI-powered assessment platform
Assess your organization's maturity across multiple standards and regulations including ISO 27001, DORA, NIS2, NIST, GDPR, and hundreds more. Get actionable insights and track your progress with collaborative, AI-powered evaluations.
Explore More Comparisons
See how EN 1090 and MAS TRM compare against other standards