# FINMA Risk Monitor 2024: Addressing Cyber Threats and Market Volatility

> The article summarizes the FINMA Risk Monitor 2024, which names nine key risks for Swiss financial institutions, including cyber threats. SwissGRC explains how integrated GRC frameworks, automation and scenario planning support resilience.

- URL: https://swissgrc.com/ar/finma-risk-monitor-2024-addressing-cyber-threats-and-market-volatility/
- الناشر: SwissGRC®
- تاريخ النشر: 2024-12-06
- آخر تحديث: 2026-08-20

## معلومات أساسية

- The FINMA Risk Monitor 2024 identifies nine key risks: real estate and mortgage, credit, credit spread, liquidity and funding, cyber, sanctions compliance, money laundering, outsourcing and market access.
- Smaller financial institutions in supervisory category 5 reported the highest increase in cyberattacks between 2020 and 2024.
- Cyberattacks are rising in frequency and sophistication, particularly against smaller financial institutions.
- Vulnerabilities in the real estate market are heightened by structural changes such as remote work and affect both residential and commercial properties.
- SwissGRC recommends three GRC measures: a centralized view of risk data, compliance automation for sanctions and AML requirements, and predictive analytics with scenario planning.
- For cybersecurity, the article names robust frameworks integrated into GRC strategies, incident response planning and continuous monitoring.

**Switzerland’s financial sector is under considerable pressure from an increasingly complex and interconnected risk landscape. The Swiss Financial Market Supervisory Authority (FINMA) Risk Monitor 2024 has identified several risks facing financial institutions, from rising cyber threats and geopolitical tensions to ongoing vulnerabilities in the real estate market. This report is a clear call to action, urging financial institutions to prioritize resilience in the face of mounting uncertainties.**

The findings of the report come at a pivotal time. Cyberattacks are on the rise, particularly against smaller financial institutions, with their frequency and sophistication growing year over year. Vulnerabilities in the real estate market, heightened by structural changes such as remote work, continue to pose systemic risks. Meanwhile, navigating international sanctions and combating money laundering are becoming ever more challenging in today’s volatile geopolitical climate. Against this backdrop, financial institutions must adopt an integrated and forward-looking approach to ensure both compliance and resilience.

Understanding the Risk Landscape

The [FINMA Risk Monitor 2024](https://www.finma.ch/en/~/media/finma/dokumente/dokumentencenter/myfinma/finma-publikationen/risikomonitor/20241118-finma-risikomonitor-2024.pdf?sc_lang=en&hash=1EABA096CB06AABA7CFDC5F7AB64260F) highlights the following key risks that demand immediate attention from financial institutions:

1. **Real Estate and Mortgage Risks:** Persistent vulnerabilities in the real estate market, including risks of overheating and structural shifts like remote work, affecting both residential and commercial properties.
2. **Credit Risks:** Broader credit risks beyond mortgages, particularly in non-mortgage loan segments, exacerbated by economic uncertainties and inflationary pressures.
3. **Market Risk – Credit Spread Risk:** Volatility in credit spreads can lead to devaluations in fixed-income portfolios, posing significant risks to financial stability.
4. **Liquidity and Funding Risks:** Sudden market disruptions or reliance on short-term funding expose institutions to potential liquidity crises.
5. **Cyber Risks:** A significant rise in cyberattacks across all categories, with smaller institutions experiencing the sharpest increase.
6. **Sanctions Compliance:** Geopolitical tensions increase the complexity of navigating international sanctions, requiring enhanced compliance efforts.
7. **Money Laundering Risks:** As financial crime methods evolve, institutions face heightened expectations for AML frameworks to prevent and detect illicit activities.
8. **Outsourcing Risks:** The reliance on [third-party](https://www.swissgrc.com/en/tprm-software) providers for critical functions introduces operational, data security, and compliance risks that require careful management.
9. **Market Access Challenges:** Geopolitical shifts and regulatory changes threaten institutions’ ability to maintain seamless access to international markets.

These risks are interrelated, creating a compounded challenge for financial institutions. Addressing them requires not just compliance with regulatory frameworks but a proactive and integrated approach to risk governance.

The GRC Perspective: Turning Challenges into Opportunities

The risks outlined in the FINMA Risk Monitor 2024 may appear daunting, but they also present financial institutions with an opportunity to transform their approach to [governance, risk, and compliance (GRC)](https://swissgrc.com/en/grc-as-a-business-enabler-why-technology-is-essential/). By leveraging robust and integrated GRC frameworks, institutions can not only address these risks effectively but also turn them into strategic advantages. This perspective emphasizes a shift from reactive compliance to proactive resilience and adaptability.

**Integrated Risk Management: Gaining a Centralized View**

One of the most pressing challenges for financial institutions is the fragmented nature of [risk management](https://swissgrc.com/en/risk-management-software/). Cyber threats, real estate vulnerabilities, credit exposures, and regulatory compliance often operate in silos, making it difficult to gain a comprehensive understanding of risk exposure. A cohesive GRC framework can change that dynamic by integrating risk data into a single, centralized platform. This holistic view allows institutions to identify, monitor, and address risks in real time, enhancing decision-making and reducing the likelihood of blind spots. With integrated dashboards and analytics, decision-makers can prioritize risks and allocate resources more effectively, aligning their actions with both regulatory expectations and strategic goals.

**Compliance Automation: Meeting Regulatory Demands with Precision**

As geopolitical tensions drive evolving sanctions and anti-money laundering (AML) requirements, compliance has become increasingly complex. Manual processes, once the norm, are no longer sufficient to keep pace with rapidly changing regulatory frameworks. GRC tools powered by advanced automation can ensure institutions remain compliant without overburdening their resources. Such automation not only reduces the risk of non-compliance but also enhances operational efficiency, freeing up resources to focus on strategic priorities.

**Resilience Building: Preparing for the Unpredictable**

The interconnected nature of today’s risks—ranging from geopolitical tensions to market disruptions—makes resilience a critical capability. Predictive analytics and scenario planning, key components of modern GRC platforms, allow institutions to anticipate potential disruptions and prepare accordingly. By embedding these tools into their risk management practices, institutions can navigate uncertainty with confidence, ensuring business continuity and safeguarding stakeholder trust.

The Growing Cybersecurity Challenge

The sharp rise in cyberattacks, as highlighted in FINMA’s report, underscores the urgent need for institutions to prioritize cybersecurity. Smaller institutions, categorized as category 5, have been particularly vulnerable, experiencing the highest increases in reported incidents between 2020 and 2024. This trend aligns with global patterns, where attackers target less-resourced entities, often exploiting gaps in defenses.

![Reports of Cyberattacks](https://swissgrc.com/ar/wp-content/uploads/sites/5/2024/12/Reports-of-Cyberattacks.png)

The chart above illustrates the progression of reported cyberattacks across supervisory categories over the last four years. Notably, category 5 institutions have seen a steep rise, indicating that attackers are focusing on entities perceived to have fewer resources or less robust defenses. This trend is a stark reminder of the need for comprehensive cybersecurity strategies across all segments of the financial sector.

The consequences of a successful cyberattack extend far beyond financial losses. Operational disruptions, data breaches, and reputational damage can undermine trust in an institution and, by extension, the broader financial system. Addressing these risks requires a multi-pronged approach:

- **Robust Cybersecurity Frameworks**: Institutions must integrate cybersecurity into their broader GRC strategies, ensuring alignment with regulatory expectations and industry best practices.
- **Incident Response Planning**: Effective response plans can minimize downtime and mitigate the impact of an attack.
- **Continuous Monitoring**: Real-time tools that detect and respond to threats are essential for staying ahead of increasingly sophisticated attackers.

The upward trend in cyber incidents is a wake-up call for the sector. Institutions must treat cybersecurity as a core pillar of their risk management strategy, ensuring that they are well-equipped to protect both their operations and their stakeholders’ trust.

Conclusion: Adapting to a Dynamic Risk Landscape

Switzerland’s financial institutions have long been recognized for their stability and innovation. However, maintaining this leadership position requires a commitment to evolving with the risk landscape. The FINMA Risk Monitor 2024 serves as a call to action for Swiss financial institutions. The interconnected risks of today—cyber threats, geopolitical uncertainties, and market vulnerabilities—require a strategic and integrated response. Institutions must move beyond compliance to embrace GRC frameworks that enable agility, resilience, and long-term success.

As the challenges intensify, so do the opportunities. By investing in GRC solutions, financial institutions can not only meet regulatory expectations but also secure their competitive edge. To explore how integrated GRC solutions can help your institution thrive in this dynamic environment, [**reach out to Swiss GRC**](https://swissgrc.com/en/discoverycall/). Together, we can turn challenges into opportunities and build a resilient future for Switzerland’s financial sector.

## الأسئلة الشائعة

### What is the FINMA Risk Monitor 2024?

It is a report by the Swiss Financial Market Supervisory Authority (FINMA) that identifies the main risks facing Swiss financial institutions. It urges institutions to prioritize resilience in the face of growing uncertainty.

### Which risks does the FINMA Risk Monitor 2024 highlight?

It highlights real estate and mortgage risks, credit risks, credit spread risk, liquidity and funding risks, cyber risks, sanctions compliance, money laundering risks, outsourcing risks and market access challenges. The article notes that these risks are interrelated.

### Which financial institutions are most affected by cyberattacks according to FINMA?

Smaller institutions in supervisory category 5 saw the highest increases in reported incidents between 2020 and 2024. The article says attackers target entities perceived to have fewer resources or weaker defenses.

### How can GRC software help financial institutions address FINMA risks?

According to SwissGRC, an integrated GRC platform brings risk data into one centralized view and automates compliance work for sanctions and AML. Predictive analytics and scenario planning help institutions prepare for disruptions.

### What should institutions do to improve cybersecurity?

The article recommends integrating cybersecurity into the broader GRC strategy, planning incident response to limit downtime, and using continuous monitoring tools that detect and respond to threats in real time.