Skip to content

GRA · Financial Cyber and Operational Resilience

Spatial financeWhere capital meets hazard, exposure and transition

Professional research

Financial Cyber and Operational Resilience research asks where concentration in shared providers creates systemic exposure, how long disruption to important services lasts in practice, how physical and cyber shocks combine, and what supervisory frameworks have changed in firm practice.

01Workspace

The workspace for professional research.

Evidence register

Operational resilience · Professional research · Example interface, not a record

Register currentGRA · Financial Cyber and Operational Resilience

Indicators

unit · cadence · label

Important business servicesservicesannualPublished statisticsSP-0129
Services within impact tolerance in testing of servicesannualASSESSEDSP-1202
Mapped dependenciesresourcesannualDERIVEDSP-4295
Critical third partiessuppliersannualPublished statisticsSP-5139
Severe-but-plausible scenarios testedscenariosannualPublished statisticsSP-4574

Source passport

Source
Service map
Licence
open · attribution
Steward
Service owner
Coverage
62 pct of places
Known limits
sparse in uplands

Coverage by place

Evidence register.Illustrative interface; not live data.

Financial Cyber and Operational Resilience · Evidence register. Evidence register: example names and illustrative values, not a record.

02Questions

What the research asks.

  1. 01

    Critical business services

    Identifying service continuity outcomes.

  2. 02

    Financial cyber threats

    Attack paths and control evidence.

  3. 03

    Cloud and outsourcing

    Concentration and resilience.

  4. 04

    Incident and crisis response

    Response roles, escalation and recovery.

  5. 05

    Digital supply chains

    Vendor risks and software dependencies.

  6. 06

    Data integrity and availability

    Confidentiality, integrity and continuity.

03Agenda

Questions, methods and limits.

QuestionMethodLimit
Which providers serve many firms?Analysis of public registers and disclosuresRegisters are often confidential
How long do disruptions last?Analysis of published incident reportsReporting bias
How do physical and cyber shocks combine?Scenario designFew historical cases
04Evidence

Every result keeps its label.

Results are labelled as observed, published statistics, estimated, modelled, forecast, scenario or expert judgement. Missing data is shown as missing, never filled silently.

Methods

Methods and uncertainty

How results are produced and where they stop

Sources

Source and data register

Where data comes from and on what terms

Publications

Reviewed outputs

Citable work with its editorial status

05Sources

Where this page's references lead.

The bodies and documents this page is read against. Status and editions change; each link goes to the issuing body.

07Questions and answers

Questions and answers.

Can I propose a research question?
Yes. Write to Contact with the question, the context and who would use the answer. A proposal receives a reference; it does not commit the platform to the work.
ReportsContribute

Contribute evidence from this page.

Reports is the Consortium's quarterly publication. What you know about this subject can become evidence, a case or a correction in the next edition, credited to you and published under CC BY 4.0 where it is your own work.

Global Risks AllianceFinancial Cyber and Operational ResilienceScenario and Stress-TestStrategic Systems
Financial Cyber and Operational Resilience

Bring an exposure or capital question to the Alliance.

Information and enquiries are open today. An enquiry receives a reference and names the next step; applications, payments, compute allocations and registrations open only when their team, terms and review capacity exist.