G7 cyber exercise tests cross-border financial defenses
The G7 Cyber Expert Group has completed its 2026 cross-border coordination exercise, simulating a major cyber-attack to test financial resilience. G7 financial authorities also adopted a long-term strategy to increase simulation frequency across all jurisdictions.
Simulated attacks across seven borders
The 2026 Cross-Border Coordination Exercise, concluded on May 18, 2026, brought together finance ministries, central banks, bank supervisors, and market authorities from all G7 jurisdictions.
Building on the previous simulation conducted in 2024, the exercise tested key operational improvements in incident response, recovery protocols, and crisis communication during a simulated systemic cyber incident.
To bolster operational readiness, the group formalised a long-term exercise strategy designed to raise the frequency and consistency of cross-border drills.
The initiative aims to align strategic and operational responses, ensuring that international authorities can maintain core financial services and minimize systemic disruptions during actual cross-border cyber emergencies.
Shared tools for borderless threats
Bank of England Deputy Governor Clare Lombardelli highlighted the necessity of joint action, stating that cyber disruption can rapidly cross borders in an interconnected financial architecture.
Treasury official Francis Brooke emphasized that cyber threats ignore national boundaries, noting that the United States Department of the Treasury plans to deepen practical cooperation through the group during its upcoming G7 Presidency.
Recent publications by the expert group also cover artificial intelligence, post-quantum cryptography transitions, and institution reconnection frameworks.
Practice without binding standards
Regular simulations are essential for emergency channels, but drills alone cannot patch legacy banking flaws.
True resilience relies on private sector execution, where operational alignment remains uneven across borders.
Without binding global recovery standards, these exercises risk becoming reassuring administrative routines.