Operational resilience

In a review published on 2 September, the UK Financial Conduct Authority (FCA) has warned that frontier AI is affecting cyber resilience, governance, and vulnerability management for financial firms.

Centrii has published ‘GRIDLOCK’, a risk assessment analysis of cyber-physical exposure in UK battery energy storage systems (BESS).

Larry Marks argues that AI should now be recognised as an operational dependency requiring the same operational resilience planning applied to other important business services.

The resilience landscape is littered with different disciplines reinventing the same core concepts. Helen Molyneux breaks down the silo problem, explaining why frameworks rarely talk to each other, why the industry profits from keeping them apart, and how to align your internal plans

When disruption affects the technology used to deliver critical business services, the success of those plans can depend on whether technical teams can still see what is happening, access essential systems, and take corrective action.

The European Supervisory Authorities (EBA, EIOPA, and ESMA) have published a statement calling for a cross-sectoral, risk-based, and consistent supervisory approach to mitigate the ICT risks stemming from frontier AI models.

Although written from an insurance perspective, this recently published academic paper’s treatment of cloud concentration, correlated failure, and scenario calibration is highly transferable to operational resilience.

The UK Treasury has announced that the Government has designated four major global cloud services and technology providers as Critical Third Parties (CTPs).

It’s July 2028 and a disgruntled employee is about to set a ball-rolling that will have unanticipated impacts around the world…

Your business is starting to depend on AI, but can it survive an outage? Why the most important AI conversation today is about resilience, not just innovation.