Lesson 6 of 6

Testing, information sharing and learning across the sector

Controls and plans are worth only what they do under attack. This lesson sets out the kinds of tests the international guidance describes, from vulnerability assessments to red team tests, explains how a threat-led test is organised, shows with a worked example how a board can follow the findings to closure, and describes how lenders share information with each other and with authorities.

Published 14 October 2026