IDEAS home Printed from https://ideas.repec.org/p/ecb/ecbwps/20263222.html

Disciplining digital risk: evidence from cyber stress tests

Author

Listed:
  • Abidi, Nordine
  • Gambacorta, Leonardo
  • Kok, Christoffer
  • Miquel-Flores, Ixart
  • Madio, Leonardo
  • Partida, Alberto

Abstract

Investment in cybersecurity in an interconnected banking system has public-good proper- ties: positive externalities can generate systemic underinvestment. Using confidential supervi- sory data from the European Central Bank, we first identify “laggard” European banks that underinvest relative to their cyber-risk profiles, and then examine how supervisory scrutiny af- fects their incentives to invest. We exploit the 2024 ECB Cyber Resilience Stress Test (CyRST) as a quasi-natural experiment. In a difference-in-differences design, we find that following the CyRST announcement, laggard banks increased cybersecurity investment by about 80% rel- ative to their peers. The response is stronger among laggards subject to high-intensity su- pervisory oversight, consistent with scrutiny exerting a disciplining effect. Overall, the results suggest that targeted supervisory scrutiny may help mitigate underinvestment incentives and strengthen banks’ operational risk management. JEL Classification: G21, G28, G32, L86, K23

Suggested Citation

  • Abidi, Nordine & Gambacorta, Leonardo & Kok, Christoffer & Miquel-Flores, Ixart & Madio, Leonardo & Partida, Alberto, 2026. "Disciplining digital risk: evidence from cyber stress tests," Working Paper Series 3222, European Central Bank.
    • Handle: RePEc:ecb:ecbwps:20263222
    Note: 1847506
    as

    Download full text from publisher

    File URL: https://www.ecb.europa.eu//pub/pdf/scpwps/ecb.wp3222~27c5b77e07.en.pdf
    Download Restriction: no
    ---><---

    Other versions of this item:

    References listed on IDEAS

    as
    1. Berger, Allen N. & Bouwman, Christa H.S., 2013. "How does capital affect bank performance during financial crises?," Journal of Financial Economics, Elsevier, vol. 109(1), pages 146-176.
    2. Anginer, Deniz & Demirguc-Kunt, Asli & Huizinga, Harry & Ma, Kebin, 2013. "How does corporate governance affect bank capitalization strategies ?," Policy Research Working Paper Series 6636, The World Bank.
    3. Anil K. Kashyap & Anne Wetherilt, 2019. "Some Principles for Regulating Cyber Risk," AEA Papers and Proceedings, American Economic Association, vol. 109, pages 482-487, May.
    4. Daron Acemoglu & Asuman Ozdaglar & Alireza Tahbaz-Salehi, 2015. "Systemic Risk and Stability in Financial Networks," American Economic Review, American Economic Association, vol. 105(2), pages 564-608, February.
    5. Santos Silva, J.M.C. & Tenreyro, Silvana, 2011. "Further simulation evidence on the performance of the Poisson pseudo-maximum likelihood estimator," Economics Letters, Elsevier, vol. 112(2), pages 220-222, August.
    6. Iñaki Aldasoro & Leonardo Gambacorta & Paolo Giudici & Thomas Leach, 2023. "Operational and Cyber Risks in the Financial Sector," International Journal of Central Banking, International Journal of Central Banking, vol. 19(5), pages 340-402, December.
    7. John Kandrac & Bernd Schlusche, 2021. "The Effect of Bank Supervision and Examination on Risk Taking: Evidence from a Natural Experiment," The Review of Financial Studies, Society for Financial Studies, vol. 34(6), pages 3181-3212.
    8. Kok, Christoffer & Müller, Carola & Ongena, Steven & Pancaro, Cosimo, 2023. "The disciplining effect of supervisory scrutiny in the EU-wide stress test," Journal of Financial Intermediation, Elsevier, vol. 53(C).
    9. Acharya, Viral V. & Berger, Allen N. & Roman, Raluca A., 2018. "Lending implications of U.S. bank stress tests: Costs or benefits?," Journal of Financial Intermediation, Elsevier, vol. 34(C), pages 58-90.
    10. Thomas Schneider & Philip E Strahan & Jun Yang, 2023. "Bank Stress Testing: Public Interest or Regulatory Capture?," Review of Finance, European Finance Association, vol. 27(2), pages 423-467.
    11. Lukas Ahnert & Pascal Vogt & Volker Vonhoff & Florian Weigert, 2020. "Regulatory stress testing and bank performance," European Financial Management, European Financial Management Association, vol. 26(5), pages 1449-1488, November.
    12. Ahnert, Lukas & Vogt, Pascal & Vonhoff, Volker & Weigert, Florian, 2020. "Regulatory stress testing and bank performance," CFR Working Papers 20-03, University of Cologne, Centre for Financial Research (CFR).
    13. Andreas Lehnert & Beverly Hirtle, 2015. "Supervisory Stress Tests," Annual Review of Financial Economics, Annual Reviews, vol. 7(1), pages 339-355, December.
    14. Diana Bonfim & Geraldo Cerqueiro & Hans Degryse & Steven Ongena, 2023. "On-Site Inspecting Zombie Lending," Management Science, INFORMS, vol. 69(5), pages 2547-2567, May.
    15. Buch, Claudia M. & DeLong, Gayle, 2008. "Do weak supervisory systems encourage bank risk-taking?," Journal of Financial Stability, Elsevier, vol. 4(1), pages 23-39, April.
    16. Goldstein, Itay & Leitner, Yaron, 2018. "Stress tests and information disclosure," Journal of Economic Theory, Elsevier, vol. 177(C), pages 34-69.
    17. Calem, Paul & Correa, Ricardo & Lee, Seung Jung, 2020. "Prudential policies and their impact on credit in the United States," Journal of Financial Intermediation, Elsevier, vol. 42(C).
    18. Jose M. Berrospide & Rochelle M. Edge, 2019. "The Effects of Bank Capital Buffers on Bank Lending and Firm Activity: What Can We Learn from Five Years of Stress-Test Results?," Finance and Economics Discussion Series 2019-050, Board of Governors of the Federal Reserve System (U.S.).
    19. Hirtle, Beverly & Kovner, Anna & Vickery, James & Bhanot, Meru, 2016. "Assessing financial stability: The Capital and Loss Assessment under Stress Scenarios (CLASS) model," Journal of Banking & Finance, Elsevier, vol. 69(S1), pages 35-55.
    20. Rey, Hélène & Jamilov, Rustam & Tahoun, Ahmed, 2021. "The Anatomy of Cyber Risk," CEPR Discussion Papers 16217, Centre for Economic Policy Research.
    21. Cortés, Kristle R. & Demyanyk, Yuliya & Li, Lei & Loutskina, Elena & Strahan, Philip E., 2020. "Stress tests and small business lending," Journal of Financial Economics, Elsevier, vol. 136(1), pages 260-279.
    22. Andrea Passalacqua & Paolo Angelini & Francesca Lotti & Giovanni Soggia, 2021. "The Real Effects of Bank Supervision: Evidence from On-Site Bank Inspections," Temi di discussione (Economic working papers) 1349, Bank of Italy, Economic Research and International Relations Area.
    23. Yadav Gopalan & Ankit Kalda & Asaf Manela, 2021. "Hub-and-Spoke Regulation and Bank Leverage [Inconsistent regulators: evidence from banking]," Review of Finance, European Finance Association, vol. 25(5), pages 1499-1545.
    24. Eisenbach, Thomas M. & Kovner, Anna & Lee, Michael Junho, 2022. "Cyber risk and the U.S. financial system: A pre-mortem analysis," Journal of Financial Economics, Elsevier, vol. 145(3), pages 802-826.
    Full references (including those not matched with items on IDEAS)

    Most related items

    These are the items that most often cite the same works as this one and are cited by the same works as this one.
    1. Dimitrios Karakostas & Ioannis Tsakalos & Athanasios Fassas & Dimitris Kenourgios, 2026. "The disciplinary effect of banking supervision: is the EU-wide 2023 stress test merely a supervisory formality?," Journal of Banking Regulation, Palgrave Macmillan, vol. 27(1), pages 1-11, March.
    2. Kok, Christoffer & Müller, Carola & Ongena, Steven & Pancaro, Cosimo, 2023. "The disciplining effect of supervisory scrutiny in the EU-wide stress test," Journal of Financial Intermediation, Elsevier, vol. 53(C).
    3. Nguyen, Thach Vu Hong & Ahmed, Shamim & Chevapatrakul, Thanaset & Onali, Enrico, 2020. "Do stress tests affect bank liquidity creation?," Journal of Corporate Finance, Elsevier, vol. 64(C).
    4. Luu, Hiep Ngoc & Vo, Xuan Vinh, 2021. "The Impact of Supervisory Stress Tests on Bank Ex-Ante Risk-Taking Behaviour: Empirical Evidence from a Quasi-Natural Experiment," International Review of Financial Analysis, Elsevier, vol. 75(C).
    5. Hans Degryse & Cédric Huylebroek & Bernardus F Nazar Van Doornik, 2025. "The disciplining effect of bank supervision: evidence from SupTech," BIS Working Papers 1256, Bank for International Settlements.
    6. Bank for International Settlements, 2025. "Lessons on supervisory effectiveness - a literature review," BCBS Working Papers 45, Bank for International Settlements.
    7. Paul Konietschke & Steven Ongena & Aurea Ponte Marques, 2022. "Stress tests and capital requirement disclosures: do they impact banks' lending and risk-taking decisions?," Swiss Finance Institute Research Paper Series 22-60, Swiss Finance Institute.
    8. García, Raffi E. & Steele, Suzanne, 2022. "Stress testing and bank business patterns: A regression discontinuity study," Journal of Banking & Finance, Elsevier, vol. 135(C).
    9. Abad, Pilar & Robles, M.-Dolores & Alonso Orts, Carlos, 2023. "Stress testing programs and credit risk opacity of banks: USA vs Europe," Journal of International Financial Markets, Institutions and Money, Elsevier, vol. 89(C).
    10. Berger, Allen N. & Demirgüç-Kunt, Asli, 2021. "Banking research in the time of COVID-19," Journal of Financial Stability, Elsevier, vol. 57(C).
    11. Lo, Andrew W. & Thakor, Richard T., 2023. "Financial intermediation and the funding of biomedical innovation: A review," Journal of Financial Intermediation, Elsevier, vol. 54(C).
    12. Aldasoro, Iñaki & Gambacorta, Leonardo & Giudici, Paolo & Leach, Thomas, 2022. "The drivers of cyber risk," Journal of Financial Stability, Elsevier, vol. 60(C).
    13. Schneider, Thomas & Strahan, Philip E. & Yang, Jun, 2025. "Bank stress testing, human capital investment and risk management," Journal of Financial Economics, Elsevier, vol. 171(C).
    14. Niepmann, Friederike & Stebunovs, Viktors, 2024. "Modeling your stress away," Journal of Banking & Finance, Elsevier, vol. 158(C).
    15. García, Raffi E. & Harithsa, Jyothsna G. & Owusu, Abena, 2024. "Adding stress in banking: Stress tests and risk-taking sentiments," Journal of Corporate Finance, Elsevier, vol. 87(C).
    16. Joel Shapiro & Jing Zeng, 2024. "Stress Testing and Bank Lending," The Review of Financial Studies, Society for Financial Studies, vol. 37(4), pages 1265-1314.
    17. Ahmed, Kasim & Calice, Giovanni, 2024. "The effects of the EBA's stress testing framework on banks' lending," Economic Modelling, Elsevier, vol. 132(C).
    18. Lubberink, Martien, 2022. "Max headroom: Discretionary capital buffers and bank risk," International Review of Financial Analysis, Elsevier, vol. 84(C).
    19. Kasim Ahmed & Giovanni Calice, 2023. "The effects of supervisory stress testing on bank lending: examining large UK banks," Journal of Banking Regulation, Palgrave Macmillan, vol. 24(2), pages 228-247, June.
    20. Lambertini, Luisa & Mukherjee, Abhik, 2022. "Stress tests and loan pricing—Evidence from syndicated loans," Finance Research Letters, Elsevier, vol. 46(PA).

    More about this item

    Keywords

    ;
    ;
    ;
    ;

    JEL classification:

    • G21 - Financial Economics - - Financial Institutions and Services - - - Banks; Other Depository Institutions; Micro Finance Institutions; Mortgages
    • G28 - Financial Economics - - Financial Institutions and Services - - - Government Policy and Regulation
    • G32 - Financial Economics - - Corporate Finance and Governance - - - Financing Policy; Financial Risk and Risk Management; Capital and Ownership Structure; Value of Firms; Goodwill
    • L86 - Industrial Organization - - Industry Studies: Services - - - Information and Internet Services; Computer Software
    • K23 - Law and Economics - - Regulation and Business Law - - - Regulated Industries and Administrative Law

    NEP fields

    This paper has been announced in the following NEP Reports:

    Statistics

    Access and download statistics

    Corrections

    All material on this site has been provided by the respective publishers and authors. You can help correct errors and omissions. When requesting a correction, please mention this item's handle: RePEc:ecb:ecbwps:20263222. See general information about how to correct material in RePEc.

    If you have authored this item and are not yet registered with RePEc, we encourage you to do it here. This allows to link your profile to this item. It also allows you to accept potential citations to this item that we are uncertain about.

    If CitEc recognized a bibliographic reference but did not link an item in RePEc to it, you can help with this form .

    If you know of missing items citing this one, you can help us creating those links by adding the relevant references in the same way as above, for each refering item. If you are a registered author of this item, you may also want to check the "citations" tab in your RePEc Author Service profile, as there may be some citations waiting for confirmation.

    For technical questions regarding this item, or to correct its authors, title, abstract, bibliographic or download information, contact: Official Publications (email available below). General contact details of provider: https://edirc.repec.org/data/emieude.html .

    Please note that corrections may take a couple of weeks to filter through the various RePEc services.

    IDEAS is a RePEc service. RePEc uses bibliographic data supplied by the respective publishers.