When Systems Fail, Trust Is on the Line

Building Cyber Resilience in Financial Services

In financial services, trust is the product.

When a cyberattack disrupts core banking, trading, payments, lending or claims systems, the consequences extend far beyond operational downtime. Every minute of disruption impacts customer confidence, regulatory standing, business continuity, and shareholder value.

That statistics paint a stark picture. Nearly 77% of financial institutions have experienced a material cyberattack. Of those 87% reported revenue loss and 93% faced legal or regulatory repercussions. Yet despite significant investment in cybersecurity programs, only a small percentage of organizations have developed the mature, integrated resilience capabilities required to withstand and recover from a major cyber event.

Meanwhile, regulatory expectations continue to rise.

With DORA now in force across Europe, the lastest NYDFS Part 500 amendments active in the United States, and increasing focus on frameworks such as Sheltered Harbor, regulators are asking a different question than they were five years ago.

It's no longer simply:

Can you prevent an attack?

It's now:

Can you prevent an attack?

Join a select group of IT, cybersecurity, risk and resilience leaders from across banking and insurance for an invitation-only virtual roundtable exploring how organizations a re moving beyond prevention-focused strategies to build true cyber resilience and recovery readiness at scale.

Discussion Topics

Defining Your Minimum Viable Bank

When every system appears critical, determining recovery priorities becomes increasingly difficult.

We'll explore:

• How institutions are identifying the systems and services that matter most during a crisis
• What constitutes a "minimum viable bank" or "minimum viable insurer" 
• How organizations are testing and rehearsing recovery scenarios before incidents occur
• Approaches to protecting customer-facing services while restoring operations

Recovery as a Regulatory Imperative

Regulatory increasingly expect institutions to demonstrate recovery capability - not simply document it.

• How organizations are proving they can recovery within defined impact tolerances
• Preparing for regulatory examinations and resilience assessments
• Lessons learned from DORA, NYDFS part 500 and other emerging frameworks
• Building evidence-based resilience programs that satisfy both regulators and boards

Restoring Trust, Not Just Data

Recovery is about more than restoring systems. It's about restoring confidence. 

Topics include:

• What defines a clean recovery in today's threat environment
• Validating system integrity before reconnecting critical operations
• Preventing reinfection and ensuring compromised assets are fully remediated
• Managing customer and stakeholder trust throughout recovery efforts

Closing the IT-Security Divide

Resilience depends on collaboration. Yet many organizations continue to struggle with siloed teams and fragmented response processes.

We'll discuss:

• How IT, cybersecurity, risk and business continuity teams can operate as a unified function
• Improving communication before, during and after an incident
• Aligning priorities across technical and business stakeholders
• Creating recovery playbooks that work under real-world pressure

From Backup to Last Line of Defense

Modern attackers increasingly target recovery infrastructure itself. Leading institutions are therefore rethinking the role of backup and recovery technologies. 

Discussion topics include:

• The role of immutable storage in cyber recovery strategies
• Isolated recovery environments and cyber vaulting approaches
• Clean room recovery methodologies
• Ensuring recovery assets remain available when primary environments are compromised
• Building a resilient recovery foundation that survives sophisticated attacks

The Future of Cybersecurity Is Recovery Readiness

Cyberattacks are no longer a mater of if, but when.

The institutions that emerge strongest will be those that can recover critical operations quickly, validate trust and continue serving customers under pressure.

Join your peers for a candid discussion on what it takes to build cyber resilience in financial services - and prove it when it matters most.