CREST urges ecosystem-wide cyber resilience for financial services
Original title: CREST Urges Whole-Ecosystem Approach to Financial Cyber Resilience
The October 29 whitepaper offers illustrative maturity pathways for institutions, supervisors and providers, not a new compliance standard.
CREST published a whitepaper arguing that financial cyber resilience depends on institutions, supervisors and specialist providers developing together. Weaknesses in shared infrastructure, technology providers, cyber firms or public authorities can undermine the wider system, it says. The framework maps five maturity stages for each domain and suggests multi-year programs so requirements do not outpace readiness.
- CREST says the pathways are illustrative, not a compliance standard.
- Years one and two cover service mapping, hygiene gaps, a baseline and a strategy.
- Years three to five add independent assessment, tiered requirements and provider accreditation.
- Years five to 10 cover proportionate threat-led testing and system-wide exercises.
- CREST warns early mandates for top accreditations could exclude local providers.
From the original article
2 min read at infosecurity-magazine.com
CREST has published a framework for strengthening cyber resilience across financial services
By Alessandro Mascellino · infosecurity-magazine.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.