Cyber Risk

The Cyber Risk course will be updated to reflect changes in the environment. The course will start with an overview about the state of play and recent notable developments, followed by a stock-take of the cyber landscape; then several core topics will be explored. Whilst supervision will remain the basis of the course, in the light of DORA, the course will be more hands on and interactive, with actual case studies on each core topic.
For each of the topics covered by the course, the sessions will be based on a case study that integrates the subject matter with an actual review of a fictitious financial entity (or financial group). For example, we will set out a financial entity/group and its operating model at the start of the course. Thereafter, for each session, we will set out a case related to that entity/group – e.g. supervision session will result in the participants developing an onsite inspection scope, agenda, test plan and we will conduct an actual onsite inspection interview. This will combine theory with actual practice all the way through the course. A cyber simulation exercise will be also integrated into the course, where participants will be split into teams and they will play different roles in the overall simulation. The simulation exercise will take a wider perspective to look at interdependencies and contagion effects across the financial system.