G7 Adopts New Principles to Strengthen the Digital Operational Resilience of the Global Financial System

3 December 2025

The G7 renews its commitment to strengthening the digital resilience of the financial system by releasing a set of principles to foster coordinated collective response and recovery actions in the event of large-scale cyber incidents, the G7Cyber Expert Group (CEG) has published the document 'G7 Fundamental Elements of Collective Cyber Incident Response and Recovery in the Financial Sector (CCIRR)'. Addressed to financial authorities, financial institutions and third-party providers, the document promotes a coordinated and resilient approach that can mitigate the impact of incidents and safeguard systemic stability amid growing digitalization and global threats.

The document is structured around three main areas: the creation, implementation and long-term maintenance of the collective cyber incident response and recovery (CCIRR) mechanism. It outlines a set of non-binding guiding principles to strengthen response and recovery operations following cyber incidents in the financial sector, with a view to fostering greater convergence across jurisdictions and improving international cooperation, especially in the aftermath of large-scale events.

Key topics include: governance, coordination protocols, interoperability with existing frameworks, crisis response and communication tools, regular tests, information and intelligence sharing, and building a trusted community.

To learn more, visit our section on cybersecurity and the page on international principles and regulations for mitigating cyber risks.