2026-05-15
The Bank of England, Financial Conduct Authority, and HM Treasury require regulated firms and financial market infrastructures to proactively plan for and mitigate cybersecurity risks posed by rapidly evolving frontier AI models. Firms must strengthen board-level governance, accelerate the identification and remediation of vulnerabilities at scale, manage third-party supply chain risks, and adopt automated AI-enabled defences to match the speed of AI-driven attacks. These measures align with existing operational resilience rules and aim to protect financial stability, customer safety, and market integrity against faster, more disruptive cyber threats.