#03Operational resiliencePublished
Failure.
What if the main ICT risk is not the attacker?
In ten seconds
According to the EBA’s 2026 Risk Assessment Report, only 10% of major ICT incidents are cybersecurity-related.
Signal
According to the EBA’s 2026 Risk Assessment Report, only 10% of major ICT incidents are cybersecurity-related.
Paradox
Sometimes nobody attacks. The system simply fails.
Implication
Resilience plans built around cyberattacks overlook outages, poorly managed changes and supplier dependencies. For a subsidiary, one more question arises: who fixes it when the incident comes from a group tool?
Sources
- EBA, Risk Assessment Report 2026
Domains concerned
Ready to think differently?
Talk to us