Bank of England Governor Andrew Bailey, as FSB Chair, Warns G20 of AI-Driven Cyber Risks to Concentrated Financial Infrastructure

Bailey's letter states that frontier AI increases the speed, scale and economics of cyber attacks while exploiting concentrated third-party technology dependencies. It explicitly calls for strengthened vulnerability management and preparation for simultaneous multi-firm disruptions. The document notes that many jurisdictions lack protocols for advanced AI development and deployment, directly linking regulatory gaps to systemic exposure. The warning follows the Bank for International Settlements October 2024 assessment that an AI investment bust ranks among the top threats to global prosperity, citing circular financing arrangements and potential equity-market corrections. Both documents converge on concentrated providers as the transmission channel, yet neither quantifies exposure by jurisdiction or firm. Western regulators face an incentive to impose guardrails on open-weight models originating from China while preserving domestic innovation advantages. Chinese state actors gain from rapid capability diffusion that undercuts Western control points. Financial institutions absorb the residual risk through shared cloud and data dependencies without corresponding capital charges. Primary records show Bailey's letter contains no new data releases or enforcement mechanisms, only recommendations for national authorities. BIS analysis similarly stops at scenario description. Absent coordinated G20 action on model registration thresholds, the next observable shift will be unilateral requirements from individual central banks rather than multilateral standards.