Regulators publish 2023 cyber findings

The BoE, PRA and FCA have published their latest annual CBEST thematic report. The report, which has been published in full for the first time, contains cyber resilience good practice, lessons learned and insight, including from the National Cyber Security Centre.

Findings from the stress test cover the following key areas:

• identity and access management;
• staff awareness and training;
• secure configuration;
• network security;
• incident response and security monitoring; and
• data security.

The regulators are encouraging firms to read the report and consider embedding the findings into their cyber strategies.