Hypothetical tabletop exercises designed to assess a bank’s operational resilience during a risk event too often feature fairytale happy endings that limit their usefulness, a US regulator has warned.
“I find a lot of tabletop exercises always have a nice happy ending: it’s all good, everybody go home, here’s a list of protocol lessons we’ve learnt,” said Rinku Sinha, the programme lead for cybersecurity policy in the supervision group of the Federal Reserve Bank of New York.
Richard Cooper
Only users who have a paid subscription or are part of a corporate subscription are able to print or copy content.
To access these options, along with all other subscription benefits, please contact info@risk.net or view our subscription options here: http://subscriptions.risk.net/subscribe
You are currently unable to print this content. Please contact info@risk.net to find out more.
You are currently unable to copy this content. Please contact info@risk.net to find out more.
