The European Systemic Risk Board (ESRB) has published a report aimed at advancing macroprudential tools for cyber resilience. The report, which was prepared against a geopolitical backdrop of heightened cyber risk, highlights the need to boost cyber resilience.
To this end, authorities across the EU are encouraged to make progress on three elements:
- Cyber Resilience Scenario Testing is an analytical tool designed to assist authorities in (i) testing the response and recovery capacity of the financial system in severe but plausible scenarios involving a cyber incident, (ii) evaluating the impact of these scenarios on financial and operational stability, and (iii) identifying areas where further work is required to mitigate cyber risk. The ESRB encourages authorities to pilot system-wide cyber resilience scenario testing as soon as possible. Such pilots can complement other analytical tools that the authorities might be using and deepen their understanding of the risks to system-wide cyber resilience.
- Systemic Impact Tolerance Objectives is a further analytical tool developed to identify and measure the impacts of cyber incidents on the financial system, and to evaluate when they are likely to breach tolerance levels and cause significant disruption. Defining such objectives can help authorities to assess their own coordination and action capabilities.
- Financial crisis management tools, which the report considers in terms of how well they deal with system-wide cyber incidents. The report finds that the effectiveness of existing financial crisis management tools in responding to a cyber incident depends on the severity of the impact on the financial system and on how fast it spreads.