Operational resilience
How conflict sharpened Israel’s role in cyber security
Recent growth in offshoring of infosec comes despite regulatory focus on supply-chain resilience
Banks treat ERM as compulsory – even when it isn’t
More than 80% follow supervisory guidance or expectations for ERM, benchmarking shows
Ice Credit below availability target after six-hour op failure
May 5 outage longest since public disclosure began in 2015
Dora delay leaves EU banks fighting for their audit rights
Regulation requires firms to expand scrutiny of critical vendors that haven’t yet been identified
CFTC operational resilience rules have ‘no chance’ of revival
Commissioner Johnson touts framework as response to Ion hack, but lawyers say it misses target
ECB may force banks to rethink cloud just months after Dora
EU regulator pushes multi-cloud strategy for banks, but guidance will not be binding
Regulators zero in on third-party risk, resilience
In latest survey, 35% of banks say watchdogs have “significantly increased” focus on third-party risk, with reports of arduous inspections and growing resource strain
Ninety-one per cent of banks have specialist teams for resilience risk
Latest survey shows regulatory pressure is driving broader framing of resilience, beyond IT and cyber
The AI bot that left the garage
Senior operational risk exec explains how hidden third-party feature could lead to systemic risk