Joint cyber stress test boosts financial sector resilience
Danmarks Nationalbank and the Danish Financial Supervisory Authority conducted a joint stress test with financial entities. The exercise strengthened operational resilience against cyberattacks and yielded concrete initiatives for collective response.
Designing disruption scenarios
The stress test introduced a new model of collaboration where firms and authorities jointly design specific disruption scenarios.
The exercise combines a tabletop component, allowing for planned responses, with a real-time crisis simulation for immediate, coordinated action.
Ulrik Nødgaard, Governor of Danmarks Nationalbank, highlighted the significant effort and energy invested by participants in designing an ambitious scenario.
He noted the valuable lessons learned for individual organizations and across the sector, particularly for strengthening the sector-level crisis management group, FSOR.
This collaborative approach ensures maximum learning and practical application for enhancing collective preparedness against complex threats like cyberattacks and hybrid warfare, which are increasingly driven by AI.
Interconnectedness demands joint action
The fictional scenario involved data manipulation that created uncertainty about securities ownership, halting both settlement and further trading.
Governor Ulrik Nødgaard emphasized that despite its extreme nature, the elevated threat landscape makes such scenarios plausible, underscoring the importance of preparing for severe incidents to ensure business continuity.
The test confirmed that the financial sector's mutual interconnectedness means no single actor can manage a major disruption alone.
Effective recovery is described as a 'timed puzzle,' where cooperation and coordination are essential for all pieces to fall into place, moving beyond individual contingency plans to a collective response.
From learning to concrete action
Three joint initiatives have been launched to strengthen collective preparedness for extensive, prolonged ICT disruptions.
These include developing a joint playbook for securities disruptions, a working group for external crisis communication, and an initiative to enhance joint preparation across scenarios.
This move from theoretical learning to concrete, sector-wide action is crucial for fortifying the financial system against an evolving threat landscape.