Financial institutions need to understand the consequences of allowing ATO to occur, and take a multi-layered approach to cybersecurity in response to these threats.