Risk Landscape

Financial entities other than microenterprises set up, keep and periodically review a robust, comprehensive programme of digital operational resilience testing within the ICT risk management framework, applied proportionately under Article 4(2), to assess inci...

The institution draws up an improvement plan and timetable to close every gap found, endorsed by management with the assessment results;

The governing body should give the organization a clear grasp of its intentions by setting well-defined strategic outcomes, together with guidance on the strategy for reaching them, that it has concluded will fulfil the purpose and the value generation objecti...

Indicators for strategy and for partnerships and collaborations should reflect the strategic outcomes the governing body has set and the context it considered in setting them (the value generation model, timescales, the risk landscape, the interdependence with...

Business continuity management is the process of implementing and maintaining the organization's capability to continue delivering its products and services at a capacity set in advance and within tolerable timescales while a disruption lasts (ISO 22313).

Beside the RDS returns, Lloyd's collects cyber aggregate exposure data from syndicates each year: for 2026 the Cyber Aggregates Data Collection, on a template issued with the RDS documentation in January 2026 (with minor changes from market feedback), is repor...