CMORG has produced a collaborative PQC readiness engagement methodology to explore how industry can work together to assess readiness, identify dependencies, and develop a repeatable approach for common providers.

This Risk Mitigation Plan supports organisations in assessing and strengthening their resilience to the Generative AI (GenAI) and Agentic AI Compromise of Identification Controls (Customer Account Creation and Staff Account Creation) scenarios as outlined in the CMORG Dynamic Scenario Library.

The DSL is designed to be a shared resource which contains a catalogue of categorised and individually described scenarios, constructed using a common design methodology.

FMIs and Firms comply with the same operational resilience and business continuity regulations. They all make detailed operational resilience self-assessments available to the Bank of England, PRA and FCA.

The purpose of this questionnaire is to understand the macro vulnerabilities that exist in relation to business continuity and operational resilience between FMIs and their clients.

This questionnaire aims to be the next step in the dialogue between FMIs and clients. The spirit is to be collaborative and non-judgemental.

The questionnaire template includes sample answers to guide your responses.

The following document is a one-page summary of best practice for firms when interacting with Frontier AI. This is a particular topic of interest as Frontier AI is developing at pace, reshaping the cyber threat landscape and challenging organisations to strengthen preparedness, response, and collaboration. CMORG continues to support the industry in understanding these changes and translating good practice into practical action.

CMORG’s Firm Guidance for Frontier AI consolidates a broad and growing body of industry and public authority thinking into a single reference point, enabling financial institutions of different sizes and levels of maturity to draw on leading practices.

CMORG has released new principles‑based Guidance for Firm Cyber Recovery Capabilities to help financial institutions prepare for, and recover from, the most severe cyber incidents. 

The aim is to provide a standard format for capturing feedback and lessons from incidents across Sector Response Groups and FMI Crisis Committees and in relation to the broader SRF to improve its operating effectiveness.

The aim of this document is to provide Sector Response Groups, FMI Crisis Committees, firms and CTPs with clear guidelines on how to share information into and across the SRF to improve its operating effectiveness.