Cyber Risk in Central Banking (BIS)
The rising number of cyber attacks in the financial sector poses a threat to financial stability and makes cyber risk a key concern for policy makers. This paper presents the results of a survey among members of the Global Cyber Resilience Group on cyber risk and its challenges for central banks. The survey reveals that central banks have notably increased their cyber security-related investments since 2020, giving technical security control and resiliency priority. Central banks see phishing and social engineering as the most common methods of attack, and the potential losses from a systemically relevant cyber attack are deemed to be large, especially if the target is a big tech providing critical cloud infrastructures. Generally, respondents judge the preparedness of the financial sector for cyber attacks to be inadequate. While central banks in most emerging market economies provide a framework for the collection of information on cyber attacks on financial institutions, less than half of those in advanced economies do. Cooperation among public authorities, especially in the international context, could improve central banks’ ability to respond to cyber attacks.
King V Code on Corporate Governance for South Africa 2025
King V sets out an outcomes-based corporate governance code for South Africa focused on ethical culture, sustainable performance and value creation, prudent control and legitimacy within the organisation’s economic, social and environmental context. It defines universally applicable principles supported by flexible, proportional recommended practices rather than rigid rules, under an “apply and explain” disclosure regime. The Code emphasises ethical and effective leadership, integrated thinking, responsible corporate citizenship, stakeholder inclusivity and robust oversight of risk, technology, remuneration, assurance and stakeholder relationships to support long-term systems value creation.
Integrated Strategy, Risk & Resilience (ISRR) Toolkit: Phases 1-4
The ISRR Implementation Roadmap and Toolkit is a practical resource that helps organisations integrate strategy, risk and resilience into one coherent framework across the enterprise. It is structured around four phases: Commit and Mandate, Context Enablement, Perform and Achieve, and Monitor, Review, Record and Report. Each phase is supported by customisable templates and tools in familiar formats (Word, PowerPoint, Excel), covering policies, governance charters, risk appetite, integrated environmental scanning, stakeholder analysis, risk assessment, resilience self‑assessment, strategy and initiative design, incident and crisis management, business continuity, and IT disaster recovery. It also includes designs for an integrated dashboard, board and committee reports, integrated reporting inputs, maturity assessment, integrated assurance and lessons‑learnt registers. The toolkit is intended for educational use and must be tailored to each organisation’s legal, regulatory and strategic context.
Emotion in Strategic Management: A Review and Future Research Agenda
Emotion in strategic management has attracted increasing scholarly interest during the past twenty-five years. Researchers have demonstrated the nature and significance of emotion in strategic management from a broad range of perspectives across different levels of analysis. Given the expanding research on the topic, the time is ripe to synthesize this diverse and multifaceted body of knowledge.
Exploring the Indirect Links between Enterprise Risk Management and the Financial Performance of SMEs
This paper responds to the lack of empirical evidence on how enterprise risk management (ERM) and the financial performance of small and medium-sized enterprises (SMEs) are related. Structural equation modeling is used to explore new
mediators in the relationship between ERM and SME financial performance. The
results show that organizational culture (mission dimension) and strategic risk management performance are full and positive mediators between ERM and financial performance......
Top Risks Survey – 2024 to 2034
The ever-changing risk landscape and the overall perceived magnitude and severity of risks should prompt boards and executives to scrutinise closely the approaches they use to remain focused on emerging risk issues and to integrate those insights into strategic decision-making.
Risk Management 2025 and beyond: Priorities and Transformation Agenda for Financial Services
Risk Management 2025 and Beyond distills the perspectives of senior Risk executives at financial institutions across the globe to understand today's priorities and help build the risk transformation agenda for the future.
Cyber Risks: Systematic Literature Analysis
This systematic literature review focuses on the digitalization theme and its associated risks, particularly cyber risks. Conducted through a comprehensive exploration of the Scopus database over two decades, employing keywords such as "digitalization," "digitization," and "digital risks," this research aimed to understand the evolution of terminology and scholarly discourse in this domain. The investigation initially targeted "digital risks" but shifted towards keywords like "cyber risks," "cybersecurity," and "cyber resilience" to reflect the changing landscape. The review traces the origins of the often-employed keyword "industry 4.0" and its impact on research interests, prompting a focus on more recent publications due to the rapid pace of development in the field.
Data Governance Essentials Handbook
Definitions of Data Governance are numerous. However, they agree on a key principle - that it’s dedicated to the organisation of people, processes, and technology to enable effective data management.
State of Trust Report – 2024
Trust is critical to the success of every business. But building, scaling, and demonstrating trust is getting harder for organizations. To meet customer expectations, security leaders and their teams must address complex threats, a growing compliance burden, and increasing risk from their third party vendor footprint. The rapid adoption of AI technologies only adds to the challenge, requiring more oversight and governance.