GRA · Financial Cyber and Operational Resilience
Spatial financeWhere capital meets hazard, exposure and transition
Research and industry programmes
Programmes follow how operational resilience is governed: international principles, regional regimes such as DORA and national supervisory practice. The platform supplies evidence for supervisors and firms.
The workspace for research and industry programmes.
Workstream tracker
Research and industry · Programme year 2 · Example interface, not a record
Workstreams
owner · stage · status
| Self-assessment | Service owner | Scoping | M7 · week 11 | On track |
| Impact tolerance setting | Supervisor | Scoping | M5 · week 15 | On track |
| Third-party exit plans | Board | Scoping | M6 · week 16 | At risk |
| Scenario testing programme | Board | Build | M3 · week 36 | Blocked |
| Service mapping | Operational resilience lead | Build | M7 · week 16 | On track |
Effort against plan
person-weeks
Milestones
- W8M1Self-assessment: scoping note signed
- W12M2Inputs qualified at the gate
- W22M3Impact tolerance setting: build review
- W30M4Controlled test with observers
- W40M5Publication and decision record
Financial Cyber and Operational Resilience · Workstream tracker. Workstream tracker: example names and illustrative values, not a record.
Three levels of work.
What each examines.
| Level | Questions |
|---|---|
| Global | Principles, incident reporting formats, third-party toolkits |
| Regional | DORA and critical third-party oversight |
| National | Supervisory testing and sector-wide exercises |
Financial Cyber and Operational Resilience programme work is read against European Union (DORA and TIBER-EU), BCBS (operational resilience principles) and FSB (cyber lexicon and FIRE). National entries would draw on dependency maps and incident data, and each would state which values are observed, published statistics, modelled or unknown.
How the process runs.
Process explorer · Process
Research and industry programmes: Policy question to decision
9 steps·5 stages·1 gate
Process
Research and industry programmes: Policy question to decision
A priority becomes a question, evidence, a decision case and a limited publication; the competent authority decides, never the programme.
01 Question
- 01A priority becomes a questionStep · Universe; national counterpartsA priority becomes a researchable question with stated criteria. National counterparts own the agenda, data and decisions.
- 03Scientific and stakeholder challengeStep · the Global Centre for Risk and Innovation (GCRI); the Global Risks Forum (GRF)Scientific and affected-stakeholder challenge informs mission selection and methods.
02 Evidence and options
- 04Assemble the evidenceStep · GCRIMethods, labelled data and uncertainty are assembled. Every finding carries one of nine evidence labels.
- 06Decision case with optionsRecord · The decision owner named in the caseA decision case binds owner, alternatives, evidence and deadline. It needs sensitivity and robustness.
03 Review and publication
- 07G6 · Publication authorisedGate · The Global Risks ForumGRF authorises publication of results that have passed scientific and editorial review. It cannot publish personal data.
- 08Publish with method, uncertainty and limitsRecord · ReportsFindings are published with their method, uncertainty and limits. An edition is published after review, not to a calendar.
04 Outside the programme
- 02Competent authority decidesDecision · The competent authorityThe authority or institution decides under its own rules. The authority decides; the programme informs.
- 05Action and implementation stay with the ownersActor · The relevant government, operator or licensed institutionDecisions and execution stay with the relevant government, operator or licensed institution. The programme records one only if shared.
05 Learning
- 09Corrections and lessons feed the next agendaStep · UniverseCorrections and lessons feed the next annual agenda. The findings of one year set the mandate of the next.
The Nexus cycle · Decision rights · The programme yearDesigned programme process, not a record of operation. No cycle has run and every programme is at service level R0. A gate is a programme decision, never a public-authority approval, certification or deployment authorisation.
Every programme shows where it stands.
A programme is shown as exploring, forming, constituted, active, paused or archived, according to its record. A plan is never presented as an activity.
Where this page's references lead.
The bodies and documents this page is read against. Status and editions change; each link goes to the issuing body.
Pages in Research and industry programmes.
Questions and answers.
How does a country take part?
Bring an exposure or capital question to the Alliance.
Information and enquiries are open today. An enquiry receives a reference and names the next step; applications, payments, compute allocations and registrations open only when their team, terms and review capacity exist.
Legal documents.
Maps, data and figures on this site are shown for context and general information. They are not advice, forecasts or warnings; the limits of the information are set out in the Disclaimers and Data Notices.