GRA · Financial Cyber and Operational Resilience
Spatial financeWhere capital meets hazard, exposure and transition
Published scenarios
Operational resilience scenarios must be severe but plausible: a ransomware attack that corrupts backups, the loss of a cloud region, a provider's faulty update, or a regional disaster that stops sites and staff. This page sets out scenario designs and the assumptions that decide whether a test means anything. Values are design values.
The workspace for published scenarios.
Pipeline
Published scenarios · Workspace WS-55 · Example interface, not a record
Stages
- Ingest4 sources
- Validateschema · licence
- Transformversioned
- ModelCybersecurity
- Testheld-out
- Releasewith limits
Artefacts
| Service map | v2.8 | To check | Published statistics |
| Test results | v5.7 | Open | ASSESSED |
| Supplier register | v6.4 | Open | Published statistics |
| Incident history | v3.1 | To check | REPORTED |
Compute quota
share used vs alert level
Financial Cyber and Operational Resilience · Pipeline. Pipeline: example names and illustrative values, not a record.
Releases appear as they are reviewed.
Analysis runs in Foundry; reviewed releases are listed here.
Severe but plausible cyber scenarios.
| Scenario | Systemic angle |
|---|---|
| Ransomware at a widely used service provider | Many firms lose the same service |
| Data integrity attack on a payment or ledger system | Uncertainty about balances halts activity |
| Faulty software update pushed to many endpoints | Non-malicious, simultaneous outage |
| Cloud region loss during a heat or flood event | Physical and cyber resilience meet |
How the process runs.
Process explorer · Process
Published scenarios: How an economic shock propagates
8 steps·4 stages
Process
Published scenarios: How an economic shock propagates
Input-output models trace a change in final use or primary input prices through industry linkages, with multipliers for output, income and employment.
01 Shock and linkages
- 01ShockDataset · SupervisorA shock enters as an exogenous change in final uses, or as a change in the price of a primary input.
- 02Input-output linkagesModel · SupervisorBackward linkages tie an industry to its suppliers, forward linkages to its buyers. The model assumes fixed technical input coefficients.
02 Economy
- 03Sector outputModel · SupervisorThe quantity model estimates how a change in final uses affects output. Output multipliers give the production needed per unit of final use.
- 04PricesModel · SupervisorThe price model simulates cost-driven inflation from changes in primary input prices. It assumes perfect competition.
03 People
- 05JobsDataset · SupervisorEmployment multipliers represent jobs created per unit of currency of additional final use.
- 06Household incomeDataset · SupervisorIncome multipliers show how final use changes affect household income. A social accounting matrix shows the circular flow of income.
04 State
- 07Public financesStep · SupervisorEffects on public revenue and spending need government accounts linked to the model, for example in a social accounting matrix.
- 08Policy responseDecision · SupervisorThe responsible party decides on a response. The same linkages can be used to test it.
Outline of an external standard or method, from its public sources. It describes what the framework says, not a record of any run. It does not show that Nexus or any partner performs, certifies or approves a step. A gate is a step of the method, never a Nexus approval. The models assume fixed technical coefficients and are not forecasts.
Settlement dependencies, and what fails with a node.
Cyber scenarios run on the same design dependency network used for payments, so a provider compromise can be traced to the services and centres it would affect. Topic depth at financial cyber threats.
Where this page's references lead.
The bodies and documents this page is read against. Status and editions change; each link goes to the issuing body.
Questions and answers.
Can I request a map or model?
Contribute evidence from this page.
Reports is the Consortium's quarterly publication. What you know about this subject can become evidence, a case or a correction in the next edition, credited to you and published under CC BY 4.0 where it is your own work.
- EmailGateway GW-GRASend it from this pageEvidence, a correction, a case, a method, a review, a translation or profile input. It arrives tagged with this page, so the editor who owns it receives it.
- ZenodoOpen depositDeposit it and submit to the communityPublish your own record on Zenodo with your ORCID iD, then submit it to the Reports community there. Curators review it; the DOI stays yours.
- ReportsGlobal Risks AllianceSee every way to contributeThe contribution types, how each is reviewed, what credit you receive, the licence and what is never accepted.
Never send personal data, sensitive infrastructure detail or anything you have no right to share. A contribution is reviewed before use; sending it confers no authorship or editorial rights, and sponsorship never buys a finding.
Bring an exposure or capital question to the Alliance.
Information and enquiries are open today. An enquiry receives a reference and names the next step; applications, payments, compute allocations and registrations open only when their team, terms and review capacity exist.
Legal documents.
Maps, data and figures on this site are shown for context and general information. They are not advice, forecasts or warnings; the limits of the information are set out in the Disclaimers and Data Notices.