While financial institutions continue to carry out basic day-to-day risk management (maintaining networks, updating software and implementing strict "cyber hygiene"), there is a need to start addressing common challenges, recognizing the spillover effects and interconnectedness between financial