Endpoint control frameworks
Security controls required of participants connecting to payment networks are examined for coverage of known fraud techniques.
GRA · Payments and Market Infrastructure
Spatial financeWhere capital meets hazard, exposure and transition
Cybersecurity and cryptography for payments and market infrastructure
Cybersecurity protects سیستەمەکان and data against attack. On this platform it covers threats to payment and settlement infrastructure, endpoint security, threat-led testing and recovery from attacks that corrupt data or halt operations.
01تۆمارکردن
Cybersecurity and cryptography for payments and market infrastructure on the record.
Method recordSTEM method
- ڕێگائاسایشی سایبەری و کریپتۆگرافی
- Applied inپارەدان و ژێرخانی بازاڕ
- داتا3 inputs
- Checks3 validation steps
- Canonical pageSTEM Commons
02بەکارهێنان
What cybersecurity and cryptography does here.
Cybersecurity and cryptography protect information سیستەمەکان and data from unauthorised access, disruption and manipulation. They address threats that can spread rapidly across interconnected digital and physical systems. In financial stability, cyber and digital resilience and digital public infrastructure, cybersecurity analysis identifies how a single compromise can propagate across sectors that share software, vendors or networks. It informs resilience requirements and cyber insurance. The canonical description is on the STEM Commons.
Threat-led testing
Red-team methods based on real attacker techniques are explained, with how scope and safety are controlled in production.
Destructive attack recovery
Recovery from ransomware and integrity attacks is analysed, including clean-room rebuilds and reconciliation of balances.
03Stress test
How a shock to assets becomes a system loss.
The equity the system loses after interbank contagion, against the initial hit, as leverage, interconnection and recovery rates change, the core of a macroprudential تاقیکردنەوەی فشاری. Teaching model with stated illustrative values, not a prediction.
کۆنترۆڵەکان
- Fall in external assets
- 2.0%
- Leverage (assets over equity)
- 10 times
- Interbank share of assets
- 10%
- Recovery on interbank claims
- 40%
- Banks in the system
- 20
- Core banks
- 20% of banks
خوێندنەوەکان
- Equity lost to the initial shock
- 18.0%
- Equity lost after contagion
- 45.0%
- Added by contagion (DebtRank)
- 27.0 points
- Banks in default
- 0
ژمارە، ڕێگا و سەرچاوەکان
| Round | System equity lost (%) | Banks in default |
|---|---|---|
| 0 | 18.00 | 0 |
| 1 | 28.80 | 0 |
| 2 | 35.28 | 0 |
| 3 | 39.17 | 0 |
| 4 | 41.50 | 0 |
| 5 | 42.90 | 0 |
| 6 | 43.74 | 0 |
| 7 | 44.24 | 0 |
| 8 | 44.55 | 0 |
| 9 | 44.73 | 0 |
| 10 | 44.84 | 0 |
| 11 | 44.90 | 0 |
| 12 | 44.94 | 0 |
| 13 | 44.96 | 0 |
| 14 | 44.98 | 0 |
| 15 | 44.99 | 0 |
| 16 | 44.99 | 0 |
| 17 | 45.00 | 0 |
| 18 | 45.00 | 0 |
| 19 | 45.00 | 0 |
| 20 | 45.00 | 0 |
| 21 | 45.00 | 0 |
| 22 | 45.00 | 0 |
| 23 | 45.00 | 0 |
| 24 | 45.00 | 0 |
| 25 | 45.00 | 0 |
| 26 | 45.00 | 0 |
| 27 | 45.00 | 0 |
| 28 | 45.00 | 0 |
| 29 | 45.00 | 0 |
| 30 | 45.00 | 0 |
ڕێگاکان
- DebtRank Battiston and others (2012), Scientific Reports 2:541
- Differential DebtRank Bardoscia and others (2015), PLOS ONE 10
- Contagion in financial networks Gai and Kapadia (2010), Proc. R. Soc. A 466
- Clearing in financial networks Eisenberg and Noe (2001), Management Science 47
- پەنجەی نادڵنیایی (مۆنتی کارلۆی پارامیتەر) Spiegelhalter, Pearson و Short (2011)، Visualising uncertainty about the future، Science 333
- هەستیاریی یەک-یەک (تۆرناد) Saltelli و ئەوانی دیکە (2008)، Global Sensitivity Analysis: The Primer، Wiley
داتا
No observed data enters this model: it runs on the teaching values set by the controls, to be replaced with a programme’s own evidence.
لە ناو شەش کۆڵەکەکەدا، بە سەرپەرشتیی Nexus Consortium
- تاقیکردنەوەکان Labs
- تێدا دروستکراوە Payments and Market Infrastructure in Foundry
- تاقیکراوەتەوە لە Payments and Market Infrastructure in Universe
- کۆدکراوە لە دارایی، بیمە و ئابووری لە Standards
- بڵاوکراوەتەوە لە Payments and Market Infrastructure in Reports
- فێرکراو لە کۆلێژی دارایی و ئابووری لە Academy
04داتا
What the method consumes.
Datasets and records used by cybersecurity and cryptography on this platform, with the role each plays and the label its values carry. Sources are listed in the source register.
| داتا | ڕۆڵ | ناونیشان |
|---|---|---|
| Threat intelligence reports | Threat landscape | REPORTED |
| Test framework documents | Testing methods | ئامارە بڵاوکراوەکان |
| Incident reports | Attack outcomes | REPORTED |
05Exposure, loss and capital
What it means for exposure, loss and capital.
The exposure, loss, scenario and capital views a risk officer, supervisor or ministry of finance would ask for, with the frameworks they report against. Structures follow supervisory and actuarial practice. Values are illustrative: never prices, ratings or advice.
Transmission channels
How a shock in cybersecurity and cryptography for payments and market infrastructure reaches credit, market, underwriting, liquidity and operational risk, and feeds back.
NGFS climate scenarios · Network for Greening the Financial SystemIFRS S2 Climate-related Disclosures · ISSBTCFD recommendations · Financial Stability Board TCFDPrinciples for the effective management of climate-related financial risks · Basel Committee on Banking Supervision
06پشتڕاستکردنەوە
How results are checked.
Controls are tested through red-team exercises, audits and formal analysis of cryptographic schemes. Incident data are used to check whether defences performed as intended.
| بپشکنە | How it is done |
|---|---|
| Threat relevance | Scenarios are based on current, sector-relevant threats |
| Safety controls | Tests document controls that protect production |
| پێداچوونەوەی سەربەخۆ | Findings are reviewed by parties outside the tested team |
Adversaries adapt, so historical data may not reflect future attacks. Software supply chains and legacy systems introduce weaknesses that are hard to inventory.
07Connections
Topics that rely on this method.
08Stewardship
Who maintains the method.
ئاسایشی سایبەری و خۆڕاگریی دیجیتاڵی stewards cybersecurity and cryptography for the Consortium and reviews how it is applied across platforms.
09پەیوەست
ئەو شوێنانەی ئەم لاپەڕەیە لە ناو کۆنسۆرتیۆم بۆیان دەبات.
10پرسیارەکان
پرسیار و وەڵام.
What are the limits of cybersecurity and cryptography in this field?
Adversaries adapt, so historical data may not reflect future attacks. Software supply chains and legacy systems introduce weaknesses that are hard to inventory.
How are results checked?
Controls are tested through red-team exercises, audits and formal analysis of cryptographic schemes. Incident data are used to check whether defences performed as intended.
Are the values on this page real?
The data names, roles and checks are real descriptions of practice. The canvas shows a design of the method’s use, not a run; no result is reported here.
Where else is this method applied?
ئەو canonical method page lists every platform that applies it.
Reportsبەشداربە
لەم لاپەڕەیەوە بەڵگە پێشکەش بکە.
Reports is the Consortium’s quarterly publication. What you know about this subject can become evidence, a case or a correction in the next edition, credited to you and published under CC BY 4.0 where it is your own work.
Global Risks Allianceپارەدان و ژێرخانی بازاڕسیستەمە ستراتیژییەکانسیناریۆ و تاقیکردنەوەی گوشار
- ئیمەیڵGateway GW-GRAلەم لاپەڕەیەوە بینێرەبەڵگە، ڕاستکردنەوە، بابەت، ڕێگا، پێداچوونەوە، وەرگێڕان یان تێکردنی پڕۆفایل. بە نیشانەی ئەم لاپەڕەیە دەگات، بۆ ئەوەی دەستکاریکەری خاوەنەکەی وەریبگرێت.
- Zenodoتەکیەی کراوەدایبنێ و بیدە بە کۆمەڵگاتۆماری خۆت لە Zenodo بە ORCID iD ی خۆت بڵاو بکەرەوە، پاشان لەوێ بیدە بە کۆمەڵگای Reports. سەرپەرشتیارەکان پێداچوونەوەی بۆ دەکەن؛ DOI هەر هی تۆیە.
- ReportsGlobal Risks Allianceهەموو ڕێگاکانی بەشداری ببینەجۆرەکانی بەشداری، هەریەکە چۆن پێداچوونەوەی بۆ دەکرێت، چ ناوبردنێک وەردەگریت، مۆڵەتەکە و ئەوەی هەرگیز وەرناگیرێت.
هەرگیز داتای کەسی، وردەکاریی هەستیاری ژێرخان یان هیچ شتێک مەنێرە کە مافی بڵاوکردنەوەت نییە. بەشدارییەک پێش بەکارهێنان پێداچوونەوەی بۆ دەکرێت؛ ناردنی ماف نابەخشێت بە نووسەرایەتی یان بەڕێوەبردنی ڕاگەیاندن، و پاڵپشتی دارایی هەرگیز دۆزینەوەیەک ناکڕێت.
پارەدان و ژێرخانی بازاڕ
Bring an exposure or capital question to the Alliance.
زانیاری و پرسیار ئەمڕۆ کراوەن. پرسیارێک ژمارەی ئاماژەی پێدەدرێت و هەنگاوی دواتر دیاری دەکات؛ داواکاری، پارەدان، تەرخانکردنی کۆمپیوتەر و تۆمارکردن تەنیا کاتێک دەکرێنەوە کە تیم، مەرج و توانای پێداچوونەوەیان هەبێت.
یاسایی
بەڵگەنامە یاساییەکان.
نەخشە، داتا و وێنەکانی ئەم ماڵپەڕە بۆ ناوەڕۆک و زانیاریی گشتی پیشان دراون. ئامۆژگاری، پێشبینی یان ئاگادارکردنەوە نین؛ سنوورەکانی زانیارییەکە لە ڕەتکردنەوەی بەرپرسیارێتی و ئاگاداریی داتادا دەستنیشان کراون.