Regulations
By Bruce Buterin
1 / 15
What Regulators Actually Want Firms to Do. The joint guidance doesn't just flag the threat and walk away.
2 / 15
Third Parties, Supply Chains, and the Gaps Nobody Talks About. There's a section of the guidance that deserves more attention than it usually gets: third-party…
3 / 15
Where Firms Can Go for Guidance. The authorities aren't leaving firms entirely on their own.
4 / 15
Britain's financial watchdogs want firms to move fast. The Bank of England, the Prudential Regulation Authority, and the Financial Conduct Authority are pushing hard for stronger…
5 / 15
These so-called frontier AI systems have basically blown past the limits of older, more familiar cyber threats.
6 / 15
The joint guidance doesn't just flag the threat and walk away. Authorities are spelling out specific areas where firms need to step up.
7 / 15
Governance is first. Boards and senior management can't treat AI-driven cyber risk as an IT department problem.
8 / 15
Risk management frameworks need updating too. Firms are expected to build or sharpen their ability to do vulnerability management fast — rapid triage, prioritization, and…
9 / 15
Firms are being told to seriously rethink how they monitor and manage external integrations — vendors, open-source software, outside services plugged into their networks.
10 / 15
More context: FCA Tells Crypto-Linked Lenders: Help Customers Hit by Middle East Cost Spike
11 / 15
That's a harder problem than it sounds, especially for larger institutions with complex, layered supply chains built up over years.
12 / 15
Firms are also being pushed toward automated defenses that can genuinely match the speed of an AI-driven attack. Not just detect — respond.
13 / 15
The authorities aren't leaving firms entirely on their own. The Cross Market Operational Resilience Group and the National Cyber Security Centre are the two main resources being…
14 / 15
The UK government is staying engaged with industry groups through the Cross Market Operational Resilience Group.
15 / 15
Firms that aren't already plugged into these resources are probably behind. The NCSC material in particular is designed to be actionable, not just descriptive.
The Currency Analytics
Want the full story?