GRA · Financial Cyber and Operational Resilience
Spatial financeWhere capital meets hazard, exposure and transition
Financial discipline overview
Operational resilience is the ability of a financial firm, and of the financial system, to prevent, adapt to, respond to, recover from and learn from operational disruption, keeping important services within tolerable limits. Cyber resilience is a central part of it. This page describes the discipline as a subject of research: its concepts, where risks lie and what shared understanding the industry needs. It describes no execution and gives no advice. The platform home links to the topics.
- STEM methods
- 4
- Canonical methods this field applies
- Topics
- 8
- Subject pages in the field
- Counterparts
- 10
- Platforms in shared fields across the network
- Report series
- 2
- Reports series it contributes to
From preventing failures to continuing services.
Traditional operational risk management focused on identifying and controlling individual risks. Operational resilience starts from the other end: assume disruption will happen, identify the services whose interruption would cause intolerable harm to customers, markets or the firm, set tolerances for how long they can be disrupted, map everything they depend on, and test whether the firm can stay within tolerance under severe but plausible scenarios.
Cyber resilience applies the same thinking to cyber threats. Prevention remains essential, but firms also need to detect intrusions quickly, contain them, recover data and services, and communicate clearly. The key shift is from asking whether a control exists to asking whether the service survives.
Activity and exposure in the Low Countries.
Night lights, population density and flood water over the Low Countries, from NASA GIBS. Each layer carries its own date.
The interactive map needs JavaScript; the layer list and sources are below.
Layers 3
Activity and exposure, for this page
Keyboard, with the map focused
Hold Ctrl or ⌘ and scroll to zoom
Latest available
NASA GIBS / EOSDIS · ASTER GDEM (METI, NASA) · Blue Marble (NASA) · © OpenStreetMap contributors (ODbL) · Natural Earth
Loading the latest NASA imagery.
Drag to move. Ctrl or ⌘ and scroll, pinch or the buttons to zoom; hover for the values under the pointer; reset returns to the region.
Activity and exposure, framed on the Low Countries.Satellite and model products as NASA publishes them, each with its own date. They are indicators, not assessments of any place.
Data: NASA GIBS · ASTER GDEM · Blue Marble · © OpenStreetMap contributors · Natural Earth · NASA EONET · U.S. Geological Survey · CIESIN/Columbia, NASA SEDAC HBASESources and licences
- We acknowledge the use of imagery provided by services from NASA's Global Imagery Browse Services (GIBS), part of NASA's Earth Science Data and Information System (ESDIS). Colours redrawn from the published colour map; values averaged into hexagonal cells where shown (modified). NASA open data
- We acknowledge the use of imagery provided by services from NASA's Global Imagery Browse Services (GIBS), part of NASA's Earth Science Data and Information System (ESDIS). Colours redrawn from the published colour map; values averaged into hexagonal cells where shown (modified). NASA open data
- VIIRS Black Marble night-time lights, NASA Goddard Space Flight Center; distributed by the NASA Level-1 and Atmosphere Archive and Distribution System (LAADS DAAC); imagery via NASA GIBS. Colours redrawn from the published colour map; values averaged into hexagonal cells where shown (modified). NASA open data
- Center for International Earth Science Information Network (CIESIN), Columbia University. 2018. Gridded Population of the World, Version 4 (GPWv4): Population Density, Revision 11. NASA Socioeconomic Data and Applications Center (SEDAC). Licensed under CC BY 4.0. Colours redrawn from the published colour map; values averaged into hexagonal cells where shown (modified). doi:10.7927/H49C6VHW. CC BY 4.0
- VIIRS near-real-time products (flood, land surface temperature, snow cover, corrected reflectance), NASA LANCE; imagery via NASA GIBS. Colours redrawn from the published colour map; values averaged into hexagonal cells where shown (modified). NASA open data
- NASA Fire Information for Resource Management System (FIRMS), VIIRS 375 m active fire product, NASA LANCE; vector tiles via NASA GIBS. Colours redrawn from the published colour map; values averaged into hexagonal cells where shown (modified). NASA open data
- ASTER GDEM is a product of METI and NASA (ASTER Global Digital Elevation Model V003, NASA LP DAAC); imagery via NASA GIBS. Colours redrawn from the published colour map; values averaged into hexagonal cells where shown (modified). Cite as: NASA/METI/AIST/Japan Spacesystems and U.S./Japan ASTER Science Team (2019). ASTER Global Digital Elevation Model V003. doi:10.5067/ASTER/ASTGTM.003. NASA open data
- Made with Natural Earth. Free vector and raster map data @ naturalearthdata.com. Public domain
- © OpenStreetMap contributors (ODbL), via NASA GIBS (coastlines, boundaries, roads and place names). Colours redrawn from the published colour map; values averaged into hexagonal cells where shown (modified). ODbL
- Blue Marble, NASA Earth Observatory; imagery via NASA GIBS. Colours redrawn from the published colour map; values averaged into hexagonal cells where shown (modified). NASA open data
- Context on the globe and flat map: coastlines, boundaries, roads and place names from NASA GIBS reference layers (OpenStreetMap data, ODbL, © OpenStreetMap contributors); Blue Marble imagery as an optional base; 3D terrain and the elevation read-out from the ASTER GDEM elevation colour index (5 m to 200 m classes, exaggerated for legibility). Boundaries are drawn as published and imply no position on any territory.
- Live events: NASA Earth Observatory Natural Event Tracker (EONET); events are indicative and keep their original source links.
- Live: U.S. Geological Survey Events are indicative, not authority warnings.
- Context: CIESIN/Columbia, NASA SEDAC HBASE. Center for International Earth Science Information Network (CIESIN), Columbia University, and NASA Socioeconomic Data and Applications Center (SEDAC): Global Human Built-up And Settlement Extent (HBASE) 2010; Seto, Guneralp and Hutyra 2012, Global Grid of Probabilities of Urban Expansion to 2030; Global Urban Heat Island (UHI) Data Set, 2013.
- NASA GIBS: We acknowledge the use of imagery provided by services from NASA's Global Imagery Browse Services (GIBS), part of NASA's Earth Science Data and Information System (ESDIS).
- Optional layers (5 sources in the layer list: live, forecast, observed and context) print their provider credit on the map and here when switched on; forecasts are model output and derived indices are estimates.
Layers and dates
- Night-time lights, daily: VIIRS Black Marble (VNP46A2), NASA LAADS DAAC · 12 Oct 2026
- Population density, 2020: Population: CIESIN, Columbia University, Gridded Population of the World v4.11 (2018), NASA SEDAC, CC BY 4.0 · static
- Flood water, 3-day composite: VIIRS Global Flood Product, NASA LANCE · 14 Oct 2026
- Land surface temperature, day, 8-day composite: VIIRS NOAA-20 Level 3, 8-day, NASA LANCE · 14 Sep 2026
- Active fires and thermal anomalies: VIIRS NOAA-20 375 m (FIRMS), NASA LANCE FIRMS · 13 Oct 2026
What important services depend on.
| Layer | Examples |
|---|---|
| People | Key staff and their locations |
| Sites | Offices, operations centres, data centres |
| Technology | Core systems, networks, cloud services |
| Third parties | Cloud, software, payment and data providers |
| Information | Customer and transaction data and its integrity |
Shocks travel between these parts, and Financial Cyber and Operational Resilience studies the links: Which services fail together? The evidence base is dependency maps and incident data.
Field overview.
The screen a team would use to follow this subject: its measures, states and decisions. Names are examples and values are illustrative.
Sources of operational risk in finance.
Malicious attack
Ransomware, intrusion, fraud and disruption campaigns targeting firms and suppliers.
Failure and error
Software faults, failed changes and infrastructure outages without malicious cause.
Shared dependencies
Concentration on cloud, software, data and market infrastructure providers.
What sector research covers.
The platform studies these risks at sector level: common dependencies, patterns in incident evidence, scenario design and measurement. Analysis is sector-level and educational. It does not assess individual firms, test their controls or certify their resilience. It publishes nothing that would help an attacker and does not comment on specific incidents under investigation.
How the discipline links to other systems.
Finance depends on energy, telecommunications and digital infrastructure studied by The Global Centre for Risk and Innovation (GCRI), including Digital Public Infrastructure. Within GRA, Payments and Market Infrastructure studies the systems that move money. At the Global Risks Forum (GRF), Capital Nexus convenes on financial system governance. Financial-system transmission sets out how disruption spreads.
Where this page's references lead.
The bodies and documents this page is read against. Status and editions change; each link goes to the issuing body.
Pages in Financial discipline overview.
Questions and answers.
Is operational resilience the same as business continuity?
Does GRA advise firms on resilience?
Which methods does the platform use?
Contribute evidence from this page.
Reports is the Consortium's quarterly publication. What you know about this subject can become evidence, a case or a correction in the next edition, credited to you and published under CC BY 4.0 where it is your own work.
- EmailGateway GW-GRASend it from this pageEvidence, a correction, a case, a method, a review, a translation or profile input. It arrives tagged with this page, so the editor who owns it receives it.
- ZenodoOpen depositDeposit it and submit to the communityPublish your own record on Zenodo with your ORCID iD, then submit it to the Reports community there. Curators review it; the DOI stays yours.
- ReportsGlobal Risks AllianceSee every way to contributeThe contribution types, how each is reviewed, what credit you receive, the licence and what is never accepted.
Never send personal data, sensitive infrastructure detail or anything you have no right to share. A contribution is reviewed before use; sending it confers no authorship or editorial rights, and sponsorship never buys a finding.
Bring an exposure or capital question to the Alliance.
Information and enquiries are open today. An enquiry receives a reference and names the next step; applications, payments, compute allocations and registrations open only when their team, terms and review capacity exist.
Legal documents.
Maps, data and figures on this site are shown for context and general information. They are not advice, forecasts or warnings; the limits of the information are set out in the Disclaimers and Data Notices.