This report presents a strategy for developing the capabilities needed to mitigate the risk of financial instability in the event of a cyber incident.