Financial Cyber and Operational Resilience
The Global Risks Alliance (GRA)
The methods Financial Cyber and Operational Resilience relies on, the assumptions they carry and the limits of what they can show.
The Financial Cyber and Operational Resilience methods page sets out the methods the platform relies on, among them cybersecurity and cryptography, reliability and resilience engineering, and network science and contagion, with their assumptions, validation and limits. Each analysis lists its assumptions and data, reports ranges and confidence beside central estimates, is checked against observations or other models, and states what it cannot show.
Fig.How a finding is reviewed before it is published. Design, not a record.
For analysis and uncertainty, in GRA's spatial-finance reading, the map opens on night lights and population density with night lights tonight from NASA GIBS, framed on the Low Countries; 4 further NASA layers wait in the list.
The interactive map needs JavaScript; the layer list and sources are below.
Layers 2
Connected activity, for this page
Keyboard, with the map focused
Hold Ctrl or ⌘ and scroll to zoom
Latest available
NASA GIBS / EOSDIS · ASTER GDEM (METI, NASA) · Blue Marble (NASA) · © OpenStreetMap contributors (ODbL) · Natural Earth
Loading the latest NASA imagery.
Drag to move. Ctrl or ⌘ and scroll, pinch or the buttons to zoom; hover for the values under the pointer; reset returns to the region.
For analysis and uncertainty, in GRA's spatial-finance reading, the map opens on night lights and population density with night lights tonight from NASA GIBS, framed on the Low Countries; 4 further NASA layers wait in the list.Satellite and model products as NASA publishes them, each with its own date; indicators, not assessments of any place; claim ceiling INTEGRATED.
Layers and dates
| Method | Use | Limit |
|---|---|---|
| Incident data analysis | Frequency, duration and cause of outages | Under-reporting and inconsistent formats; FIRE aims to align them |
| Dependency mapping | Concentration in providers | Fourth-party visibility |
| Cyber loss modelling | Insured and economic loss scenarios | Short history, changing threat |
| Resilience metrics | Recovery time and data loss against tolerance | Self-reported |
A useful metric names the service, the tolerance and the evidence that it was met under test. Topic depth at resilience metrics.
Each analysis lists its assumptions and the data it depends on.
Ranges and confidence are reported alongside central estimates.
Models are checked against observations and, where possible, against other models.
What an analysis cannot show is stated beside what it can.
Each term as this page uses it. Where a standard-setting body defines the term, the wording follows that body.
| Term | Definition |
|---|---|
| Uncertainty quantification | Characterising and propagating the uncertainties in a model to state confidence in its outputs. |
| Sensitivity analysis | Repeating an analysis under different assumptions to show how much the result depends on them. |
| Model validation | Independent testing that a model performs as intended and is fit for a stated use. |
| Cybersecurity and cryptography | Cybersecurity and cryptography protect information systems and data from unauthorised access, disruption and manipulation. |
The bodies and documents this page is read against. Status and editions change; each link goes to the issuing body.
The current service level is R0: information and enquiries. An enquiry receives a reference and names the next step; applications, payments, compute allocations and registrations open only when their team, terms and review capacity exist.