Ripple Effect: Fourth-Party Fallout is a simulation from iluminr in the Third-Party & Technology category for Third-Party Risk, Operations and Risk. It tests how your team protects payments & customer account access, with indicative mapping to Interagency Third-Party Guidance, OCC / Fed / FDIC Sound Practices and FFIEC BCM Handbook.
A critical system failure has occurred in your supply chain, creating significant operational impacts. Your third-party vendor experienced a service outage caused by a vulnerability introduced through an undetected AI-driven update in their supplier's systems. This failure has cascaded through your supplier's network, resulting in widespread service disruptions that are now affecting your business operations and customers.
What it tests
- Validate the ability to rapidly assess impacts linked with a fourth party outage.
- Validate the application of AI tools that can effectively support risk management and response to a fourth party outage.
- Identify risk mitigation strategies for reducing the impact of fourth party outages.
How you can run it
Questions about Ripple Effect: Fourth-Party Fallout
What does Ripple Effect: Fourth-Party Fallout test?
Ripple Effect: Fourth-Party Fallout tests whether your team can validate the ability to rapidly assess impacts linked with a fourth party outage, validate the application of AI tools that can effectively support risk management and response to a fourth party outage and identify risk mitigation strategies for reducing the impact of fourth party outages.
Who should take Ripple Effect: Fourth-Party Fallout?
Ripple Effect: Fourth-Party Fallout is designed for Third-Party Risk, Operations, Risk, Business Continuity, Technology & Security and Executive & Board.
Which regulations and standards does Ripple Effect: Fourth-Party Fallout support?
Ripple Effect: Fourth-Party Fallout supports testing expectations in Interagency Third-Party Guidance, OCC / Fed / FDIC Sound Practices, FFIEC BCM Handbook, EU DORA, UK PS21/3 Operational Resilience, APRA CPS 230, OSFI E-21, ISO 22301, Basel Principles for Operational Resilience, EBA Outsourcing Guidelines, EBA ICT & Security Risk Guidelines, OSFI B-13, SEC Regulation SCI, MAS BCM Guidelines, AU SOCI Act, ISO 22316, CPMI-IOSCO PFMI, ISO 22398 and NIST SP 800-84. Mapping is indicative, so confirm scope against your own obligations.
Can Ripple Effect: Fourth-Party Fallout be run individually or as a team?
It runs as a team exercise in a shared event room. It can also be extended into a full-scale simulation across teams and partners.
Can we customize Ripple Effect: Fourth-Party Fallout?
Yes. You can tailor the roles, plans, critical services, injects and objectives in the iluminr builder, or have our team customize it for you.
How do we get access to Ripple Effect: Fourth-Party Fallout?
Request it from this page. If you are an iluminr customer, we will set up access in your account. If not, we will contact you and either provide access or facilitate it for you.
