12.8.3 — Financial Sector Sovereign Continuity — maturity: live

Banking Network Continuity Backups

Providing sovereign satellite-based backup communications for national banking networks when terrestrial infrastructure is degraded, severed or under attack.

Auto-drafted reference page — content reviewed for shape, individual references not yet link-checked.

A nation's banking network is only as resilient as its least-redundant link. Interbank settlement rails, ATM switching centres, card authorisation hubs and central bank clearing systems all run over fibre and IP networks that share physical chokepoints — data-centre colocation facilities, submarine cable landing stations, border exchange points. A single cable cut, a coordinated cyberattack or a natural disaster can simultaneously black out the payment infrastructure that millions of citizens and thousands of businesses depend on for daily transactions.

A dedicated LEO satellite mesh gives the banking sector a communications layer that is physically and logically independent of every terrestrial network. Each bank branch, ATM concentrator and payment switch is fitted with a compact VSAT or software-defined terminal. When terrestrial links degrade below acceptable latency or packet-loss thresholds, the terminal fails over automatically to the satellite bearer, sustaining settlement messaging, card authorisation and liquidity reporting to the central bank. The satellite constellation is operated by a national agency, not a foreign commercial operator, so traffic is routed through sovereign ground stations and encrypted under nationally controlled keys.

The operational outcome is measurable: maximum tolerable downtime for interbank settlement in most CPSS-IOSCO-aligned jurisdictions is four hours; satellite failover can close that window to under fifteen minutes. Beyond raw uptime, sovereign operation means the central bank can enforce traffic-priority rules during a crisis — triaging life-critical payments (wages, benefits, emergency procurement) ahead of speculative flows — and can audit every packet without seeking permission from a vendor headquartered in another jurisdiction.

What matters

The Basel Committee's operational-resilience standard (BCBS 562) requires banks to define impact tolerances and prove they can operate through severe but plausible disruptions — a satellite backup directly satisfies the 'severe disruption' scenario.
Terrestrial fibre redundancy does not protect against correlated failures: a single submarine cable cut or exchange-point attack can simultaneously sever primary and secondary paths that share the same physical corridor.
Foreign commercial satellite operators can suspend, throttle or re-price service during geopolitical crises — exactly the moment a central bank most needs guaranteed bandwidth.
Sovereign operation enables the central bank to enforce real-time QoS policies that prioritise systemically important payment flows over commercial traffic without negotiating with a private vendor under duress.

Sovereignty score: 9/10 — A nation that routes its banking continuity traffic through a foreign-operated satellite network has effectively outsourced its last line of financial-system defence to an entity beyond its legal and operational control.

A foreign satellite operator headquartered in an adversary or rival jurisdiction can suspend service, comply with third-country sanctions or hand traffic metadata to foreign intelligence agencies — none of which a central bank can prevent contractually once the crisis has begun.
Sovereign key management is impossible when the encryption and routing infrastructure belongs to a commercial vendor: the central bank cannot guarantee confidentiality of interbank settlement data or prevent traffic analysis that reveals systemic vulnerabilities.
QoS and traffic-triage authority during a national emergency — the ability to prioritise payroll and benefit payments over all other traffic — requires direct control of the satellite network's management plane, which no commercial SLA reliably grants.
Supply-chain risk: VSAT terminal chipsets and modem software from certain vendors are subject to US Export Administration Regulations or equivalent controls, creating a dependency that a sovereign ground-manufactured terminal programme can eliminate over a 36-month production cycle.

Reference architecture

Payload: Ka-band communications payload, 500 MHz aggregate bandwidth per satellite, steerable spot beams, FIPS 140-3 / national-equivalent on-board encryption module; optional L-band narrowband fallback for ATM heartbeat signalling at 9.6 kbps
Bus class: 12U cubesat bus, 24 kg wet mass, 120 W end-of-life payload power; or ESPA-class microsat at 150 kg for higher-power variants serving dense urban banking nodes
Orbit: LEO sun-synchronous at 550 km, 36-satellite walker delta constellation (6 planes × 6 satellites, 53° inclination), median revisit under 10 minutes, continuous coverage for equatorial and mid-latitude nations achievable from 48 satellites
Ground segment: 3-station sovereign ground network (Ka-band uplink/downlink, S-band TT&C); primary hub co-located at the central bank's disaster-recovery data centre; secondary hub at a geographically separated government facility; SatNOGS-compatible S-band backup for telemetry monitoring
Software & data
Latency
Cost band
Lead time

References

BCBS 562: Principles for Operational Resilience — Basel Committee on Banking Supervision — The Basel Committee's 2021 principles require banks to identify critical operations and set impact tolerances that must be maintained through severe but plausible disruptions. Telecommunications continuity is explicitly cited as a dependency that must be tested and backed up.
CPSS-IOSCO Principles for Financial Market Infrastructures — Bank for International Settlements — Principle 17 mandates that systemically important payment systems maintain a recovery time objective of two hours and target same-day recovery. Satellite backup communications are consistent with the business-continuity mechanisms the standard envisions.
ITU-T Recommendation X.1051: Information Security Management Guidelines for Telecommunications — ITU — The ITU framework addresses continuity of critical telecommunications services and emphasises the need for diverse, independent bearer paths. Satellite-based redundancy is identified as a mechanism for achieving path diversity.
Cyber Resilience Oversight Expectations for Financial Market Infrastructures — European Central Bank — The ECB's oversight expectations require financial market infrastructures to maintain robust, tested continuity arrangements including communication network redundancy. Regulators explicitly expect that backup channels are independently routed from primary systems.
Operational Resilience: Impact Tolerances for Important Business Services — Bank of England / PRA — The PRA's 2021 policy statement requires firms to remain within impact tolerances for payment and settlement services even during severe disruptions, and to test continuity arrangements under realistic stress scenarios. Satellite-based backup communications represent a qualifying independent channel.