T&S Asset Management
Listen日本語

Lesson 2 of 6

Governing cyber risk: the board, the framework and the six functions

Who decides how much cyber risk a lender accepts, and who checks that it stays there. This lesson covers what the G7 and the Basel Committee expect of the board, risk appetite and tolerance, the three lines of defence, operational resilience, the Govern function of the NIST framework, and a simple risk register a board can read.

Published 14 October 2026 Members

In this lesson

  • What the board is asked to do
  • Appetite, tolerance and three lines of defence
  • Operational resilience: keeping critical operations running
  • The Govern function in the NIST framework
  • A risk register the board can read