Bank of England shifts to 'bare metal' defense against AI cyber threats

Speaking at the Institute of International Finance in Bangkok, Breeden emphasized that the assumption of impenetrable digital borders is obsolete. The central bank is now pushing major lenders to implement 'bare metal' recovery options—isolated, redundant systems that operate entirely outside a bank’s primary technical architecture. These safeguards function as a last resort, designed to activate only if standard operating environments suffer catastrophic failure.

Regulators are increasingly concerned that the speed and complexity of AI-driven intrusions outpace current protective measures. Beyond advanced recovery protocols, Breeden reiterated that fundamental cyber hygiene remains the most critical line of defense. The deputy governor noted that the potential for a paralyzed core financial institution remains her primary concern, driving the regulatory push for end-to-end resilience across the entire financial system.