At a recent graduate recruitment event, you talked with a number of different people on company stands. Each talked about the various modules that you took on your course, your ambitions and aims.

The next day, you received an e-mail from the Chief Executive Officer (CEO) at ABC Bank PLC. She explained that your ideas about the importance of cyber security were very interesting and thinks that someone of your skills and knowledge may be just what the bank is looking for, as a senior risk manager. In this capacity the senior executives of your organisation have come to you with concerns about reports concerning cyber-attacks and viruses affecting IT systems and the problem encountered by companies such as TSB Bank and VISA in Europe with their IT systems. They were alarmed by the continued growth of ransomware attacks in particular.

To reassure the senior management you are required to identify the cyber risk facing a financial institution and develop a risk management plan including continuity planning (or resilience) for the organisation to enable the organisation to manage a cyber incident effectively and continue trading in the event of the risk occurring.