The scale of recent attacks and resulting media attention, supervisory pressures to upgrade cyber risk management, and the pace of technology innovation to keep up with are increasing rapidly. These factors are compelling financial institutions to have a clear understanding of the cyber risks they face, and to determine the level of cyber risk the institution is willing to accept.
An effective, measurable, and actionable cyber risk appetite (the set of statements and metrics that articulate the views of the Board of Directors and senior management about the scope and level of cyber risk the institution is willing to accept) provides institutions with a risk management capability to set and communicate strategic boundaries for cyber risk-taking across the institution.
Boards of Directors are increasingly requesting from senior management a coherent articulation of the institution’s cyber risk appetite linked to the business model and strategy, and integrated into enterprise risk management. More advanced institutions have been on the journey to adopt and use cyber risk appetite as a tool for decision making. Others are now playing catch-up. Developing an effective, measurable, and actionable cyber risk appetite is difficult, especially given the fast-changing nature of this risk and that cyber acts as a gateway to other non-financial and financial risks. The blurred boundaries between cyber and other risk types need to be conscientiously addressed as part of the risk appetite design to avoid or at least clearly understand forms of “double counting”.
In our experience, the journey of developing a cyber risk appetite is as important as the cyber risk appetite itself. Therefore, it is essential to engage senior management and the Board of Directors using a structured design approach that combines creating awareness and getting input. In so doing, it becomes clear why zero appetite is just not realistic.
Related Insights
-
Insights Artificial Intelligence Applications In Financial Services Artificial Intelligence (AI) is a powerful tool that is already widely deployed in financial services -
Insights The Coming Wave Of Consolidation Of US Regional Banking: Reasons For Skepticism The US banking industry is bracing for trouble. After several years of favorable economic conditions and strong financial performance for US lenders, a number of challenges – many of them macroeconomic – now loom on the horizon. -
Insights Climate Change The financial services industry has a crucial role to play in the transition to a green economy. -
Insights COVID-19 And Financial Services In China Challenges and opportunities for the Chinese Financial Services sector
OUR EXPERTISE
Industries
- Aviation, Aerospace & Defense
- Distribution & Wholesale
- Energy
- Surface Transportation
- Travel & Leisure
- Business Services
- Automotive
- Communications, Media, And Technology
- Education
- Energy And Natural Resources
- Financial Services
- Health And Life Sciences
- Industrial Products
- Private Equity And Principal Investors
- Public Sector And Policy
- Retail And Consumer Goods
- Transportation
- Velocity Podcast
capabilities
- Business & Organization Transformation
- Corporate Finance & Restructuring
- Oliver Wyman Labs
- Sustainability Center
- Actuarial
- Climate And Sustainability
- Digital
- Lippincott: Brand and Innovation
- Oliver Wyman Engineers
- Operations
- Organizational Effectiveness
- Payments
- Pricing, Sales, And Marketing
- Risk Management
- Strategy
- Turnaround And Restructuring
- People And Organizational Performance
- Performance Transformation
OUR EXPERTISE
Industries
- Aviation, Aerospace & Defense
- Distribution & Wholesale
- Energy
- Surface Transportation
- Travel & Leisure
- Business Services
- Automotive
- Communications, Media, And Technology
- Education
- Energy And Natural Resources
- Financial Services
- Health And Life Sciences
- Industrial Products
- Private Equity And Principal Investors
- Public Sector And Policy
- Retail And Consumer Goods
- Transportation
- Velocity Podcast
capabilities
- Business & Organization Transformation
- Corporate Finance & Restructuring
- Oliver Wyman Labs
- Sustainability Center
- Actuarial
- Climate And Sustainability
- Digital
- Lippincott: Brand and Innovation
- Oliver Wyman Engineers
- Operations
- Organizational Effectiveness
- Payments
- Pricing, Sales, And Marketing
- Risk Management
- Strategy
- Turnaround And Restructuring
- People And Organizational Performance
- Performance Transformation