Cybersecurity for central banks
About the course
In an era of escalating digital threats and rapid technological change, central banks find themselves on the front line of cyber risk. As custodians of critical financial infrastructure, they face increasingly sophisticated attacks, from ransomware and social engineering to vulnerabilities introduced by cloud services and third-party providers. This practical training course will unpack the evolving cybersecurity landscape, equipping participants with the knowledge and skills to understand, anticipate, and respond to the cyber threats. Through engaging and scenario-based instruction, central bankers will develop the strategies needed to safeguard both their own institutions and those they oversee.
Tutors
Eliud Ramocan
Bank of Jamaica
Head, cyber resilience & threat intelligence
Two decades in the financial industry and national security sector, Mr. Ramocan is responsible for IT and cyber resilience oversight at the Bank of Jamaica, and has previously served on secondment at the Ministry of National Security where he led the national cybersecurity infrastructure programme across the military, police force and mission-critical systems in cooperation with the Government of Israel.
Mr. Ramocan holds a degree in Computer Science and Economics and an MBA from the University of the West Indies and completed his studies at Harvard Kennedy School of Government in Strategic Management for Regulatory and Enforcement Agencies. He is a university lecturer in project management, cybersecurity and risk governance at the University of West Indies, and a certified Project Management Professional (PMP), an Agile Certified Practitioner (PMI-ACP) and an authorized training instructor for the Project Management Institute (PMI).
A well-respected project management guru, Mr Ramocan is author of the globally recognized Ramocan #1 PMP Exam Prep Book for project management certification. And shows how to projectize life’s problems to make money without money in his latest book, Open Sesame- How to Make Money Without Money.
Agenda
Understanding the central bank cyber threat landscape
- Overview of the current cyber threat landscape as faced by central banks
- Analysis of threat vector development, e.g., phishing and social engineering, ransomware, cloud and third-party vulnerabilities, etc.
- Approaches to cyber risk identification, mitigation, and monitoring within the central bank
Frontier AI models and cybersecurity
- How are frontier AI models reshaping cybersecurity for central banks?
- Evolution of AI-driven offensive and defensive cyber capabilities
- Autonomous vulnerability detection, exploitation, and patching
- Operational demonstration
Threat-led penetration testing for central banks
- Simulating cyber-attacks against the central bank and on critical FMIs via TLPT
- Introduction to TLPT processes: scoping, intelligence gathering, red teaming exercise, and reporting
- Understanding the TIBER framework and how it assesses and enhances cyber resilience
Cyber incident planning: strategies and frameworks
- Central bank-specific strategies for responding to and recovering from cyber attacks
- Review of international cyber risk and resilience frameworks
- Are AI-specific frameworks necessary?
- Coordination and crisis communication between central banks, domestic and international authorities, the financial sector, and technology developers
Learning objectives
Explain the current cyber threat landscape affecting central banks, identifying principal threat actors, motivations, and recent incident trends that shape strategic priorities.
Analyse the development of key threat vectors and determine their specific implications for central bank operations and critical FMIs.
Understand how frontier AI models are reshaping cybersecurity for central banks, including their likely impact on the attack lifecycle.
Demonstrate TLPT operational tasks, translating technical findings into actionable remediation and risk‑reduction plans.
Assess major cyber resilience frameworks and customise response and recovery tools to central bank scenarios.
Who should attend
Relevant titles and departments may include, but are not limited to:
- Chief Information Security Officers (CISOs)
Heads of information security/technology
Cybersecurity analysts
Threat intelligence analysts
Penetration testers
Red team leads
Cloud infrastructure managers
Data protection officers
Vulnerability management specialists
Incident response managers
Digital transformation leads
IT security architects
Payment system supervisors
Chief risk officers (CROs)
Risk analysts
Heads of operations
Cybersecurity/information technology departments
Risk management departments
Payment oversight departments
Financial stability departments