As the first step in preparing for business disruptions, large or small, the guidance advises bankers to conduct a full evaluation of what it takes to run their business effectively and provide necessary services to their customers. This evaluation should include a variety of scenarios and possible events that could cause a business disruption.
First of all, as we draw up our defensive measures, it is vital that we all borrow from established standards such as the international Code of practice for information security management (ISO/IEC 27002), the US NIST Cybersecurity Framework or the German IT Baseline Protection Catalogues of the Federal Office for Information Security.