Financial institutions are also expected to implement procedures designed to address the risks posed by potential cyber threats, and to allow the institution to respond and recover effectively after a cyber-attack.