[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"doc-seo-202969-105":3,"detail-sidebar-cat-0-en-105":81,"doc-detail-202969-en":131},{"code":4,"msg":5,"data":6},0,"ok",{"site_id":7,"language":8,"slug":9,"title":10,"keywords":11,"description":12,"schema_data":13,"social_meta":74,"head_meta":76,"extra_data":78,"updated_unix":80},105,"en","lessons-learned-and-evolving-practices-of-the-tiber-framework-for-resilience-testing-in-the-netherlands-working-paper-october-2019","Lessons Learned and Evolving Practices of the TIBER Framework for Resilience Testing in the Netherlands - Working Paper October 2019","","Examines lessons learned and evolving practices in applying the TIBER framework to resilience testing for the financial system in the Netherlands. Frames the challenge of an evolving cyber threat landscape and increasing expectations from regulators and consumers. Summarizes how CPMI-IOSCO cyber resilience guidance highlighted the need not only to assess posture but also to test it in practice. Describes the Dutch drivers for initiating, adopting, and implementing TIBER since February 2016.",{"@graph":14,"@context":73},[15,34,56],{"@type":16,"itemListElement":17},"BreadcrumbList",[18,23,27,31],{"item":19,"name":20,"@type":21,"position":22},"https://docshare.wps.com","Home","ListItem",1,{"item":24,"name":25,"@type":21,"position":26},"https://docshare.wps.com/document/","Document",2,{"item":28,"name":29,"@type":21,"position":30},"https://docshare.wps.com/document/research-report/","Research & Report",3,{"item":32,"name":10,"@type":21,"position":33},"https://docshare.wps.com/document/lessons-learned-and-evolving-practices-of-the-tiber-framework-for-resilience-testing-in-the-netherlands-working-paper-october-2019/202969/",4,{"url":32,"name":10,"@type":35,"image":36,"author":41,"headline":10,"publisher":44,"fileFormat":47,"inLanguage":8,"description":12,"dateModified":48,"datePublished":49,"encodingFormat":47,"isAccessibleForFree":50,"interactionStatistic":51},"DigitalDocument",{"url":37,"@type":38,"width":39,"height":40},"https://docshare.wps.com/thumbnails/lessons-learned-and-evolving-practices-of-the-tiber-framework-for-resilience-testing-in-the-netherlands-working-paper-october-2019/202969.png","ImageObject",300,407,{"name":42,"@type":43},"Lucas Vance","Person",{"url":19,"name":45,"@type":46},"DocShare","Organization","application/pdf","2026-11-06","2026-09-04",true,{"@type":52,"interactionType":53,"userInteractionCount":55},"InteractionCounter",{"@type":54},"ViewAction",13,{"@type":57,"mainEntity":58},"FAQPage",[59,65,69],{"name":60,"@type":61,"acceptedAnswer":62},"What problem does the paper address regarding cybersecurity in financial institutions?","Question",{"text":63,"@type":64},"It addresses how financial institutions face an evolving threat landscape and whether they meet security standards, rules, and regulations in practice.","Answer",{"name":66,"@type":61,"acceptedAnswer":67},"How does the CPMI-IOSCO guidance relate to resilience testing?",{"text":68,"@type":64},"It emphasizes an integrated approach and highlights the need to test cyber resilience posture, not just assess it.",{"name":70,"@type":61,"acceptedAnswer":71},"Why was the TIBER framework initiated and adopted in the Netherlands?",{"text":72,"@type":64},"Strong willingness of financial institutions and authorities to test resilience in practice and share information drove initiation, adoption, and implementation since February 2016.","https://schema.org",{"og:url":32,"og:type":75,"og:title":10,"og:site_name":45,"og:description":12},"article",{"robots":77,"canonical":32},"index,follow",{"doc_id":79,"site_id":7},202969,1788552969,{"code":4,"msg":82,"data":83},"success",[84,88,92,96,101,106,111,115,120,123,127],{"id":22,"doc_module":4,"doc_module_name":25,"category_name":85,"show_sort_weight":86,"slug":87},"Story & Novel",90,"story-novel",{"id":26,"doc_module":4,"doc_module_name":25,"category_name":89,"show_sort_weight":90,"slug":91},"Literature",80,"literature",{"id":33,"doc_module":4,"doc_module_name":25,"category_name":93,"show_sort_weight":94,"slug":95},"Exam",70,"exam",{"id":97,"doc_module":4,"doc_module_name":25,"category_name":98,"show_sort_weight":99,"slug":100},5,"Comic",60,"comic",{"id":102,"doc_module":4,"doc_module_name":25,"category_name":103,"show_sort_weight":104,"slug":105},6,"Technology",50,"technology",{"id":107,"doc_module":4,"doc_module_name":25,"category_name":108,"show_sort_weight":109,"slug":110},7,"Healthcare",40,"healthcare",{"id":112,"doc_module":4,"doc_module_name":25,"category_name":29,"show_sort_weight":113,"slug":114},8,30,"research-report",{"id":116,"doc_module":4,"doc_module_name":25,"category_name":117,"show_sort_weight":118,"slug":119},9,"Religion & Spirituality",20,"religion-spirituality",{"id":118,"doc_module":4,"doc_module_name":25,"category_name":121,"show_sort_weight":118,"slug":122},"World Cup","world-cup",{"id":124,"doc_module":4,"doc_module_name":25,"category_name":125,"show_sort_weight":124,"slug":126},10,"Lifestyle","lifestyle",{"id":128,"doc_module":4,"doc_module_name":25,"category_name":129,"show_sort_weight":97,"slug":130},19,"General","general",{"code":4,"msg":82,"data":132},{"doc_id":79,"user_id":133,"nickname":42,"user_avatar":134,"doc_module":4,"category_id":112,"category_name":29,"doc_title":10,"doc_description":12,"doc_content":135,"file_id":136,"file_url":137,"file_type":138,"file_size":139,"view_count":55,"is_deleted":4,"is_public":22,"is_downloadable":22,"audit_status":22,"page_count":140,"language":141,"language_code":8,"site_id":7,"html_lang":8,"table_of_contents":142,"faqs":143,"seo_title":144,"seo_description":12,"update_tm":80,"read_time":145,"preview_page_count":4},549768064622,"https://ap-avatar.wpscdn.com/davatar_6f874abed73319feea01a86fa6f0fab8","WORKING PAPER  \nOCTOBER 2019  \nCyber Policy Initiative Working Paper Series | “Cybersecurity and the Financial System” \\#5  \nLessons Learned and Evolving Practices of the TIBER Framework for Resilience Testing in the Netherlands  \nPetra Hielkema and Raymond Kleijmeer  \nC ARNE GIE  \nENDO W MENT  \nF OR  \nINTERNATIONAL  \nPEA CE  \nLessons Learned and Evolving Practices of the TIBER Framework for Resilience Testing in the Netherlands  \nPetra Hielkema and Raymond Kleijmeer  \nFor your convenience, this document contains hyperlinked source notes indicated by this teal colored text.© 2019 Carnegie Endowment for International Peace. All rights reserved.  \nCarnegie does not take institutional positions on public policy issues; the views represented herein are the authors’ own and do not necessarily reflect the views of Carnegie, its staff, or its trustees.  \nNo part of this publication may be reproduced or transmitted in any form or by any means without permission in writing from the Carnegie Endowment for International Peace. Please direct inquiries to:  \nCarnegie Endowment for International Peace Publications Department  \n1779 Massachusetts Avenue NW Washington, DC 20036  \nP: + 1 202 483 7600  \nF: + 1 202 483 1840 [CarnegieEndowment.org](CarnegieEndowment.org)  \n[This publication can be downloaded at no cost at CarnegieEndowment.org](This publication can be downloaded at no cost at CarnegieEndowment.org).  \n+ CONTENTS  \nCybersecurity and the Financial System i  \nAbout the Authors ii Introduction 1  \nThe Initiation 2  \nPreparation—How to Get Organized? 3  \nThe Launch and Beyond 5  \nThe Testing 6  \nThe Continuation and Extension 9  \nInternational Developments 10  \nConcluding Remarks 11  \nNotes 12  \nCybersecurity and the Financial System  \nCarnegie’s working paper series ‘Cybersecurity and the Financial System’ is designed to be a platform for thought-provoking studies and in-depth research focusing on this increasingly important nexus. Bridging the gap between the finance policy and cyber policy communities and tracks, contributors to this paper series include government officials, industry representatives, and other relevant experts in addition to work produced by Carnegie scholars. In light of the emerging and nascent nature of this field, these working papers are not expected to offer any silver bullets but to stimulate the debate, inject fresh (occasionally controversial) ideas, and offer interesting data.  \nIf you are interested in this topic, we also invite you to sign up for Carnegie’s FinCyber newsletter providing you with a curated regular update on latest developments regarding cybersecurity and the financial [system:](system: CarnegieEndowment.org/subscribe/fincyber)[ CarnegieEndowment.org/subscribe/fincyber](system: CarnegieEndowment.org/subscribe/fincyber).  \nIf you would like to learn more about this paper series and Carnegie’s work in this area, please contact Tim Maurer, Co-director of the Cyber Policy Initiative, at [tmaurer@ceip.org](tmaurer@ceip.org).  \nPapers in this Series:  \n• “Cyber Risk Scenarios, the Financial System, and Systemic Risk Assessment”Lincoln Kaffenberger, Emanuel Kopp, September 2019  \n• “Cyber Resilience and Financial Organizations: A Capacity-building Tool Box,”Tim Maurer and Kathryn Taylor, July 2019  \n• “The Cyber Threat Landscape: Confronting Challenges to the Financial System”Adrian Nish and Saher Naumaan, March 2019  \n• “Protecting Financial Institutions Against Cyber Threats: A National Security Issue”Erica D. Borghard, September 2018  \n• “Toward a Global Norm Against Manipulating the Integrity of Financial Data”Tim Maurer, Ariel (Eli) Levite, and George Perkovich, March 2017  \nCARNEGIE ENDOWMENT FOR INTERNATIONAL PEACE | i  \nAbout the Authors  \nPetra Hielkema is director of the Payments and Market Infrastructure Division in the central bank of the Netherlands (De Nederlandsche Bank) .  \nRaymond Kleijmeer is senior policy officer at the Payments and Market Infrastructure Division in the centr","cbCaiq5Srk3v9Lgc","https://ap.wps.com/l/cbCaiq5Srk3v9Lgc","pdf",757054,21,"English","# Introduction\n## The Initiation\n## Preparation—How to Get Organized?\n## The Launch and Beyond\n## The Testing\n## The Continuation and Extension\n## International Developments\n## Concluding Remarks\n## Notes","[{\"question\":\"What problem does the paper address regarding cybersecurity in financial institutions?\",\"answer\":\"It addresses how financial institutions face an evolving threat landscape and whether they meet security standards, rules, and regulations in practice.\"},{\"question\":\"How does the CPMI-IOSCO guidance relate to resilience testing?\",\"answer\":\"It emphasizes an integrated approach and highlights the need to test cyber resilience posture, not just assess it.\"},{\"question\":\"Why was the TIBER framework initiated and adopted in the Netherlands?\",\"answer\":\"Strong willingness of financial institutions and authorities to test resilience in practice and share information drove initiation, adoption, and implementation since February 2016.\"}]","Lessons Learned and Evolving Practices of the TIBER Framework for Resilience Testing in the Netherlands - Working Paper October 2019 | PDF",53]