Webinar on demand – From plan to proof: Meeting mandatory cyber crisis testing requirements

Are you prepared to demonstrate true cyber crisis readiness?

Across the US and EU, regulators now expect financial institutions to prove their ability to manage cyber incidents through structured, realistic crisis exercises, often involving senior leadership, because written plans no longer satisfy regulatory expectations.

Sit back and catch up as Janne Kauhanen hosts Richard Suls and Miguel Gutierrez for a candid fireside chat, unpacking what today’s regulators look for, why institutions often fall short, and how to build exercises that stand up to scrutiny.

What We Cover

• Why crisis testing is now mandatory and why regulators insist on leadership participation
• What NYDFS, DORA, US supervisory guidance, and PCI DSS require, and why tabletop exercises have become the expected evidence
• Common failure patterns – from IT-only participation to poor documentation, and how to avoid them
• What makes an exercise “credible”, including scenario realism, customization to the organization and clear decision making under pressure
• How large organisations can maintain consistent crisis readiness across teams
• Future expectations, including more frequent testing and the impact of AI driven threats

Meet the speakers