The Making of a Cyber Crash: A Conceptual Model for Systemic Risk in the Financial Sector

75 Pages Posted: 5 Nov 2020

Multiple version iconThere are 2 versions of this paper

Date Written: May, 2020

Abstract

In October 2017, the European Systemic Risk Board (ESRB) set up a group whose objective was to examine cyber security vulnerabilities within the financial sector, and their potential impact on financial stability and the real economy. In its first year, the European Systemic Cyber Group (ESCG) sought to develop a shared understanding of Common Individual Vulnerabilities (CIVs) across ESRB members, and to identify the unique characteristics of cyber risk that could contribute to a systemic event. Building on this work, this paper describes a conceptual model for systemic cyber risk, and aims to:

•provide a structured approach that can be used to describe cyber incidents, from genesis through to a potential systemic event;

•demonstrate the link between the crystallisation of cyber risk in a firm-specific context(portraying microprudential concerns), and the possible ramifications for the financial system (applying a macroprudential focus);

•identify system-wide vulnerabilities and the unique characteristics of cyber incidents which can act as amplifiers, thereby propagating shocks through the financial system;

•support the use of historical or theoretical scenario-based analysis to demonstrate the viability of the model;

•suggest system-wide interventions that could act as systemic mitigants.

Although the model is geared towards disruption arising from cyber incidents, it can also be used for any source of operational disruption (although some elements of the model may be less relevant).

JEL Classification: E17, G01, G20, K24, L86, M15, O33

Suggested Citation

Ros, Greg, The Making of a Cyber Crash: A Conceptual Model for Systemic Risk in the Financial Sector (May, 2020). ESRB: Occasional Paper Series No. 2020/16, Available at SSRN: https://ssrn.com/abstract=3723346 or http://dx.doi.org/10.2139/ssrn.3723346

Greg Ros (Contact Author)

Bank of England ( email )

Threadneedle Street
London, EC2R 8AH
United Kingdom

Do you have a job opening that you would like to promote on SSRN?

Paper statistics

Downloads
195
Abstract Views
787
Rank
182,891
PlumX Metrics