The PRA has announced that it will invite a number of firms to participate in a voluntary cyber stress test. The stress test will focus on a severe data integrity incident as the disruption scenario and will test firms’ ability to meet the impact tolerance for payments in a severe but plausible scenario.
Although the cyber stress test is a separate but complementary exercise to the PRA’s operational resilience policy, firms are expected to draw on their own preparations for the operational resilience policy for the purpose of the stress test.