CSIRT KNF, operating within the structure of the UKNF, conducted ‘TTX KNF 2026’ cybersecurity exercises, joined by more than 120 representatives of 24 teams from financial market entities and all national-level CSIRTs, as well as by observers from financial security network institutions: the National Bank of Poland, the Ministry of Finance, and the Bank Guarantee Fund. These were the largest exercises in the area of cybersecurity for all financial market sectors.

The Tabletop Exercise was organised to simulate a crisis, which allowed for checking the reliability of procedures and response mechanisms, in particular: decision making, allocation of responsibilities, information flow, communication, and cooperation between entities involved, as these are key areas in case of a cyberincident. 

The TTX KNF 2026 exercise made it possible to verify the envisaged methods of responding to the assumed cyberincident scenario by various firms and institutions and to identify areas for further improvement. 

The event was summarised by Jacek Jastrzębski, Chair of the KNF. Jacek Jastrzębski pointed to the importance of cooperation and exchange of information between entities and financial market institutions, building the resilience of the sector, and the contribution of such exercises to developing and verifying capacity to cooperate and exchange information. In a real crisis, there will be no time to create procedures, define the scope of responsibilities or build communication channels. This is why it is important to prepare and test those mechanisms in advance so that when a threat materialises, specific institutions know what to do and whom and how they should contact, so that procedures work efficiently. 

He emphasised that this type of exercise was particularly important in the face of hybrid war, the increasing use of AI to break safeguards and wage attacks, and in the face of further escalation of the situation behind the Eastern border of Poland.

‘TTX KNF 2026’ is a component of the UKNF’s actions to strengthen the resilience of the financial market and its preparedness to respond effectively to cyberthreats.