GRA · Financial Cyber and Operational Resilience
Spatial financeWhere capital meets hazard, exposure and transition
Financial-system transmission
Operational disruption can travel through the financial system faster than financial stress. A cyber incident or outage at a shared provider can stop services at many firms simultaneously; a failure at one firm can block payments to others; and loss of confidence can turn an operational problem into a liquidity one. This page shows these channels at sector level. It complements the financial discipline overview.
- STEM methods
- 4
- Canonical methods this field applies
- Topics
- 8
- Subject pages in the field
- Counterparts
- 10
- Platforms in shared fields across the network
- Report series
- 2
- Reports series it contributes to
How technology failures become financial stress.
- 01
Common provider
An outage or compromise at a cloud, software or data provider affects every firm that relies on it at the same moment, removing the diversity that would normally let some firms keep serving customers while others recover.
- 02
Payment and settlement links
A firm that cannot send payments leaves others short of expected funds, which can spread liquidity strain.
- 03
Data corruption
Corrupted or manipulated data can propagate to firms that consume it, undermining trust in balances and positions.
- 04
Confidence
Customers and counterparties may withdraw funds or reduce exposure to a firm seen as unable to operate.
Field overview.
The screen a team would use to follow this subject: its measures, states and decisions. Names are examples and values are illustrative.
How a cyber event becomes a financial one.
- Service outage: customers cannot pay or trade.
- Data integrity loss: positions and balances are uncertain, so activity stops.
- Confidence: depositors and counterparties withdraw.
- Insured loss: cyber insurance claims correlate across policyholders sharing a provider.
Public dimensions.
Financial cyber resilience depends on telecom, power and public cloud governance outside finance. Those questions continue at GRF cyber and public infrastructure; supply chain security at GCRI supply chain security.
Infrastructure beneath finance.
Electricity
Data centres and branches depend on the grid and on backup power with limited fuel.
Telecommunications
Trading and payments depend on networks and cables that can fail or be damaged.
Natural events
Floods, heat and storms can affect data centres and operations sites in the same region.
What makes transmission stronger.
Recovery can also be sequential: a firm may restore its own systems only to find that counterparties, providers or market infrastructures are still down. Transmission is stronger when many firms depend on the same few providers, when recovery depends on systems that were themselves affected, when incidents are detected late and when communication fails. Customers feel the effects directly: payments that do not arrive, cards that do not work, accounts that cannot be accessed. Small businesses and people with few alternatives are most exposed.
Sector-level, aggregated, with limits.
Analysis uses public and aggregated information and network science and contagion methods. Analysis is sector-level and educational. It does not assess individual firms, test their controls or certify their resilience. Detailed dependency data is commercially and security sensitive, so published maps describe patterns rather than named relationships. The Universe theme on third-party concentration failure is designed to exercise these channels.
Where this page's references lead.
The bodies and documents this page is read against. Status and editions change; each link goes to the issuing body.
Questions and answers.
Is competitor data shared?
Are named providers identified as risks?
Who oversees these risks formally?
Why can operational stress move faster than financial stress?
Contribute evidence from this page.
Reports is the Consortium's quarterly publication. What you know about this subject can become evidence, a case or a correction in the next edition, credited to you and published under CC BY 4.0 where it is your own work.
- EmailGateway GW-GRASend it from this pageEvidence, a correction, a case, a method, a review, a translation or profile input. It arrives tagged with this page, so the editor who owns it receives it.
- ZenodoOpen depositDeposit it and submit to the communityPublish your own record on Zenodo with your ORCID iD, then submit it to the Reports community there. Curators review it; the DOI stays yours.
- ReportsGlobal Risks AllianceSee every way to contributeThe contribution types, how each is reviewed, what credit you receive, the licence and what is never accepted.
Never send personal data, sensitive infrastructure detail or anything you have no right to share. A contribution is reviewed before use; sending it confers no authorship or editorial rights, and sponsorship never buys a finding.
Bring an exposure or capital question to the Alliance.
Information and enquiries are open today. An enquiry receives a reference and names the next step; applications, payments, compute allocations and registrations open only when their team, terms and review capacity exist.
Legal documents.
Maps, data and figures on this site are shown for context and general information. They are not advice, forecasts or warnings; the limits of the information are set out in the Disclaimers and Data Notices.