Gara Afonso, Filippo Curti, Ping McLemore, and Atanas Mihov

Cyber risk poses a major threat to financial stability, yet financial institutions still lack consensus on the definition and terminology around cyber risk, and lack a common framework for confronting these hazards. This impedes efforts to measure and manage such risk, diminishing institutions’ individual and collective readiness to handle system-level cyber threats. In this blog post, we describe the proceedings of a recent workshop, where leading risk managers, academics, and policy makers gathered to discuss proposals for countering cyber risk. This workshop is part of a joint two-phase initiative between the Federal Reserve Banks of Richmond and New York and the Fed’s Board of Governors to harmonize cyber risk identification, classification, and measurement practices.