G7 Plans Exercises to Test Responses to AI Cyberattacks

G7 finance leaders have agreed to run tabletop exercises to test responses to AI-enabled cyberattacks, Reuters reported. The report was republished by The Indian Express on October 18 after the agreement was discussed at meetings in Bangkok.

Japanese Finance Minister Satsuki Katayama said the idea had received ministerial approval. A finance ministry official said the simulations would assess existing protocols and help update response manuals.

Private financial institutions could take part depending on the scenario. The announcement is about preparation and coordination; it is not a report that a particular bank has just suffered an AI-driven breach.

A tabletop exercise is a discussion-based rehearsal. Participants work through a hypothetical incident and explain what they would do, who would make decisions and how they would communicate. It can expose gaps without requiring a real attack against a live system.

Our analysis: the useful lesson extends beyond banks. A business can have security tools in place and still be unclear about its response when a key service becomes unavailable. Testing the decision process helps reveal that uncertainty before customers are affected.

For example, imagine a business loses access to its booking system during its busiest period. Who contacts the provider? Who can authorise temporary workarounds? How will staff tell customers whether an existing booking is still valid? Those questions require ownership and clear information, not just another software subscription.

A proportionate exercise can use fictional records and a short timeline. Include the people responsible for operations, technology and customer communication. Record decisions, identify missing access or contact details and assign follow-up actions.

Rehearsal should also distinguish a restored interface from verified recovery of business records. Teams need a way to check what happened during the interruption before resuming normal work.

The planned G7 drills underline the value of preparation, but they do not prove that any organisation's systems are secure. The next useful detail will be the exercises' scope, participants and the improvements identified through the process.