Fed official: banks must recover from cyber attack in two hours