From Tabletop to Turnkey: Building Cyber Resilience in Financial Services

The Hacker News piece, published on 6 November 2025, argues that cyber-resilience has shifted from a best practice to an operational necessity and regulatory requirement for financial institutions. It surveys how crisis management andTabletop exercises are now mandated across regions by rules such as DORA in the EU; CORIE and CPS230 in Australia; MAS TRM in Singapore; FCA/PRA Operational Resilience in the UK; the FFIEC IT Handbook in the US; and the SAMA Cybersecurity Framework in Saudi Arabia.

The article notes that these prescriptive regimes demand cross-functional collaboration, including red-team elements within resilience programmes, and highlights the growing prominence of the TIBER-EU framework through CORIE and DORA.

It discusses Filigran’s OpenAEV platform, which blends tabletop scenarios with breach-and-attack simulation to create end-to-end crisis simulations, and explains how it integrates threat intelligence from OpenCTI and synchronises participant identities to streamline communications and reporting.

The piece also details how simulations can run on multiple cadences, including long periods, to test detective controls, SOC response, and leadership communications, ultimately aiming to turn regulatory mandates into practical, repeatable resilience.