TL;DR
The G7’s finance ministers and central bankers have approved a programme of tabletop exercises simulating cyber attacks driven by frontier AI, Japan’s finance minister, Satsuki Katayama, told reporters in Bangkok on Thursday 15 October, Reuters reports. The idea had been worked up by G7 finance deputies before ministers signed it off. An official from Japan’s finance ministry said private financial institutions could take part, depending on the scenario.
Ministers met in the margins of the IMF’s yearly meetings in Bangkok. Days earlier, the Fund had warned that confidence could suffer if AI were used to attack a bank’s critical services.
What the exercises will do
According to the official, G7 finance authorities will design the simulations themselves to test how they would respond to an attack of this kind. The results will be used to judge whether existing protocols hold up, and the manuals that govern incident response will be rewritten where they fall short.
Katayama framed the exercises as being “on frontier AI”, the most capable class of models.
The UK thread
On the same Thursday, a Bank of England deputy governor said the Bank is helping lenders build deep options for recovering from a cyber attack, and that banks should not take it for granted that their defences are safe from AI-enabled attacks. Reuters notes that bank regulators around the world are moving to contain AI risk, some citing attacks on banks or rogue agents as threats to financial stability.
The agreement adds to a run of warnings. We covered Bank of England and ECB supervisors pressing lenders on AI risk and Andrew Bailey and Kristalina Georgieva’s warning on AI-driven fraud on 13 and 15 October.
Looking forward
No timetable or scenario detail has been published. In our view, the possible inclusion of private firms is the part UK banks and insurers should watch: a G7-designed scenario that tests whether a bank can keep critical services running through an AI-speed attack would quickly become a reference point for what supervisors expect in their own recovery plans. The open question is whether the results, or even a summary, will be made public.