About a-team Marketing Services
The knowledge platform for the financial technology industry

A-Team Insight Briefs

Bank of England Expects Firm Action After Sector-Wide Cloud Outage Exercise

Subscribe to our newsletter

The Bank of England expects firms to strengthen their resilience and crisis response following a sector-wide simulation of a global cloud services disruption. The exercise involved 38 of the largest and most systemically important banks and market infrastructure operators, working alongside financial authorities.

The Cross-Market Operational Resilience Group (CMORG) completed the exercise, SIMEX26, on 8 October. The group runs the simulation every two years and is chaired by the Bank and UK Finance, with participation from HM Treasury, the Financial Conduct Authority and the wider financial sector.

Hosted by the London Stock Exchange Group (LSEG) and opened by Economic Secretary to the Treasury Lucy Rigby, the exercise focused on how firms and authorities would respond to global disruption affecting cloud-based services. The scenario was developed with industry experts and did not reflect any specific threat information.

SIMEX26 included a live meeting of the Bank-chaired Cross Market Business Continuity Group, which provides strategic direction for the sector’s collective response to systemic incidents. The Bank said it now expects firms to act on the exercise to strengthen their ability to respond to severe operational and cyber scenarios.

The simulation exercised the Sector Response Framework, through which CMORG oversees the sector-wide response to systemic incidents. The framework supports a coordinated response to severe disruption across UK financial services.

Katharine Braddick, Deputy Governor of Prudential Regulation at the Bank and chief executive of the Prudential Regulation Authority, said: “The level of collaboration reflects the priority firms place on maintaining critical services in the face of disruption. That preparedness is essential to safeguarding financial stability.”

The SIMEX programme rehearses responses to challenging disruption scenarios. Previous exercises in 2022 and 2024 considered cyber-attacks against a major bank and disruption to critical infrastructure outside the financial sector.

CMORG’s wider programme identifies systemic risks, develops sector-wide mitigation strategies and shares capabilities and knowledge across financial services, supported by specialist industry groups.

Recent work by the Bank, financial authorities and industry through CMORG has included strengthening third-party engagement and resilience, enabling secure innovation in response to artificial intelligence and other emerging technologies, and enhancing cyber preparedness, response and recovery for the most severe disruption scenarios.

Subscribe to our newsletter

Related content

WEBINAR

Recorded Webinar: Managing unstructured data to ensure regulatory compliance and add value

As unstructured data floods into capital markets in the wake of traditional structured data, firms must manage both data types and ensure ease of access to extract data required for regulatory compliance efficiently and effectively. Beyond compliance, firms can add value to the business by gaining a clear understanding of their unstructured data, integrating the...

BLOG

Why an AI ‘Kill Switch’ Is Harder Than It Sounds

UK MPs have tabled an amendment to the Cyber Security and Resilience Bill that would allow regulations giving the Secretary of State last-resort powers to direct the shutdown of data centres or AI systems used or deployed by a data centre during an AI security or operational emergency. The proposal has not been endorsed by...

EVENT

AI in Data Management Summit New York City

Now in its second year, the AI in Data Management Summit NYC explores what changes when AI becomes part of the data management operating model.

GUIDE

Data Lineage Handbook

Data lineage has become a critical concern for data managers in capital markets as it is key to both regulatory compliance and business opportunity. The regulatory requirement for data lineage kicked in with BCBS 239 in 2016 and has since been extended to many other regulations that oblige firms to provide transparency and a data...