The Bank for International Settlements (BIS) published their Cyber resilience practices – Executive Summary, with the aim of strengthening cyber resilience within financial firms. Citing the Financial Stability Board’s (FSB) definition, cyber resilience consists of "the ability of an organisation to continue to carry out its mission by anticipating and adapting to cyber threats and other relevant changes in the environment and by withstanding, containing and rapidly recovering from cyber incidents."
The Executive Summary covers the following topics:
- Regulation and supervision
- Cyber incident response and recovery
- Third party discrepancies
- Information-sharing arrangements
- Cyber resilience metrics
Additional information on the Executive Summary is available here.