ProSec Global
Industries / In focus
  • Banks
  • Financial service providers
  • Insurers

Finance & Insurance

You report on risks in more detail than almost any other industry. At the same time, a considerable part of your value creation lies with third parties, while responsibility and trust remain with you. And when central services fail, an operational disruption becomes a question for supervisors, customers and the market within a very short time.

Operational resilience
Critical services have to work even when individual systems or service providers do not.
Third parties
Outsourced does not mean handed over, and supervisors know it.
Trust
The damage happens in the market, not in the repair.
Audit intensity
The ability to provide proof is not a project, but part of ongoing operations.
What we encounter in this environment
„
No board is as well informed and as poorly reassured as yours. The audit reports are complete, the key figures are in the green, the outsourcing registers are maintained. And yet a leadership question remains open: do we know which services are actually critical, what they depend on and whether our organization remains able to act if one of these dependencies fails?
How we see it

Your challenge is not a lack of information, but the connection between risk, dependency and actual business capability. The more services are outsourced and systems are connected, the more important the question becomes for leadership whether many individual pieces of proof add up to a reliable overall picture.

Typical framework conditions

What makes this environment challenging.

The financial industry lives on controlled risk. At the same time, the number of technical and organizational dependencies that cannot be fully steered in-house is growing. Supervisors and the market therefore expect not only preparedness, but traceable control over which services are critical and what they depend on. We encounter three patterns in this environment again and again.

Recurring patterns from our practice
01

The product is a promise

Financial service providers sell reliability rather than goods. If availability, confidentiality or integrity are in question, trust in the entire business model is quickly affected.

02

Value creation at third parties

A considerable part of the services frequently runs at third parties. Services can be outsourced, responsibility cannot.

03

Auditing never stops

Financial institutions are in a continuous audit cycle. Steering and resilience therefore have to be demonstrable at any time.

Requirements that play a role
01DORA
02MaRisk
03BAIT and VAIT
04Threat-led testing
05ISO 27001
06NIS2
07PCI DSS
On an equal footing

Your contact for Finance & Insurance.

Talk to someone who knows your environment.

A confidential conversation at leadership level. We assess your situation and also tell you if another address would be the right one.