GBAF Logo
Global Banking & Finance Awards® 2026 Nominations open, free to enter Nominate now →
Banks need 'bare metal' recovery in face of AI risks, says BoE's Breeden - Finance news and analysis from Global Banking & Finance Review
Finance

Banks need 'bare metal' recovery in face of AI risks, says BoE's Breeden

Published by Global Banking & Finance Review

Posted on October 15, 2026

2 min read

· Last updated: October 15, 2026

Add as preferred source on Google

BoE Warns Banks on AI-Driven Cyber Risks, Urges 'Bare Metal' Recovery Plans

Bank of England Highlights Systemic AI Cyber Threats and Recovery Strategies

Central Bank's Stance on AI-Enabled Cyber Attacks

BANGKOK/LONDON, Oct 15 (Reuters) - Bank of England Deputy Governor Sarah Breeden said on Thursday the central bank was working with banks on deep cyber-recovery options, arguing that lenders can no longer assume their defences are impenetrable in the face of AI-enabled cyber attacks.

Breeden also warned that AI advancements had reached a level where the technology posed a "systemic risk" to global financial infrastructure.

Importance of 'Bare Metal' Recovery Options

"It's not enough now to assume that the cyber attackers won't get through....We need to be thinking about what are the bare metal recovery options...that we need for the core services, and we need to think about that end-to-end across the financial system," she said at the Institute of International Finance annual meeting in Bangkok.

Definition and Role of 'Bare Metal' Systems

So-called 'bare metal' systems are ⁠entirely independent from a bank's main tech set-up and can kick in if primary operating systems are compromised.

Regulatory Response to Growing AI Risks

Banking regulators globally are stepping up efforts to contain growing AI risks, including in Britain where supervisors have been encouraging the largest banks to examine bare metal recovery plans, Reuters reported on Tuesday.

Rising Complexity of Cyber Attacks

Breeden also warned that the risks of larger and more complex cyber attacks had grown due to AI developments.

Cyber Hygiene and Systemic Concerns

"The basics of cyber hygiene... those are more important than ever," she said. "Cyber is always the thing that I say keeps me up at night. What is the thing that I worry about the most is waking up and one of our most systemically important banks or a bit of core infrastructure has been attacked and is paralysed."

(Reporting by Phoebe Seers and Rae Wee, Editing by Iain Withers and Toby Chopra)

Key Takeaways

  • Breeden emphasized that banks can no longer assume cyber defences are impregnable and must establish bare‑metal recovery mechanisms to restore core services after AI‑driven breaches.
  • Regulatory bodies, including the BoE, ECB and EU authorities, have stepped up efforts to reinforce cyber resilience through frameworks like DORA, supervisory stress tests and operational recovery mandates across jurisdictions.
  • Frontier AI models dramatically increase the speed and sophistication of cyber threats, compress breach timelines and amplify third‑party and systemic vulnerabilities—prompting calls for faster remediation, stronger governance and isolated recovery capability.

Frequently Asked Questions

What AI risks are banks currently facing?
Banks face systemic risks from AI-enabled cyber attacks, which can compromise core financial infrastructure.
What is 'bare metal' recovery in banking?
'Bare metal' recovery refers to backup systems that are entirely independent and can operate if primary systems are compromised.
Why is the Bank of England urging 'bare metal' recovery plans?
The Bank of England warns that cyber attackers can breach existing defences and that banks need robust, independent recovery options.
How is AI changing the cybersecurity landscape for banks?
AI advancements enable more complex and larger-scale cyber attacks, increasing the importance of advanced cyber-recovery strategies.
What steps are regulators taking to address AI risks?
Banking regulators are encouraging banks to examine and implement 'bare metal' recovery plans to strengthen systemic resilience.

Tags

Related Articles

More from Finance

Explore more articles in the Finance category