<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom">
  <channel>
    <title>Second Line</title>
    <link>https://secondline.ch/</link>
    <description>Swiss information security regulation translated into plain English, and honest writing about working in governance, risk and compliance.</description>
    <language>en</language>
    <atom:link href="https://secondline.ch/feed.xml" rel="self" type="application/rss+xml" />

    <!-- Newest item first. To add a post: copy one <item> block, change the four
         fields, and put it directly under this comment. pubDate must be RFC-822.
         Get the correct string with: date -R -->

    <item>
      <title>What "Operational Risks and Resilience" actually means for your bank</title>
      <link>https://secondline.ch/posts/finma-2023-1.html</link>
      <guid isPermaLink="true">https://secondline.ch/posts/finma-2023-1.html</guid>
      <pubDate>Thu, 04 Sep 2026 08:00:00 +0200</pubDate>
      <description>The board has to approve a disruption tolerance for each critical function and renew it annually. Checked against the circular text, including the three transitional clocks and what the testing requirement really says about tabletop exercises.</description>
    </item>

  </channel>
</rss>
