The updated firm mapping Template helps organisations document how they engage across SRF response groups. It supports clarity, streamlined communication, and enhanced collaboration during disruption. Firms are encouraged to integrate this into their business continuity plans and keep it regularly updated.

A simplified overview which provides a quick reference for raising awareness amongst internal stakeholders including C-suite.

This Shared Responsibility Model provides baseline guidance for understanding Artificial Intelligence security responsibilities and how these are managed between client firms and AI service providers.

A cloud framework to support consistent adoption of controls and practices across shared accountability models between FS firms and Cloud Services Providers.

This artefact was developed to promote good practice guidance on how to plan and implement security in the Cloud to optimise the approach undertaken by CMORG firms and support capability building across the wider sector.

The principles in this artefact relate to the substitution of a business service.

This artefact was designed to provide a set of principles and broad expectations of the industry on how scenario testing with third parties should be conducted.

The guidance here is intended to be used by financial firms of all maturities as either a guidance for building a framework for scenario testing with third parties, or to act as a check point for established programs.

The Supplier Risk Assurance Framework was designed to develop a third-party assurance scale as a practical tool to help firms assess the cyber security risk of their third parties and ensure appropriate levels of risk-based control.

The Reconnection Framework is a voluntary series of steps, common practices, and activities a compromised organisation could consider taking to facilitate reconnection between itself and client organisations following a significant cyber incident.