According to the UK government’s 18 May 2026 update on gov.uk, the G7 Cyber Expert Group has completed its latest cross-border coordination exercise, or CBCE. The drill was designed to test how financial authorities would react if a major cyber incident spread across more than one market at the same time. That may sound dry on paper, but the business point is simple. If core financial systems come under pressure, the first test is not only whether the technology can be repaired. It is whether officials in different countries can share information quickly, speak clearly and keep disruption from spreading.

The 2026 exercise simulated a large-scale cyber attack across all G7 jurisdictions. As set out in the official release, the sessions brought together ministries of finance, central banks, bank supervisors and market authorities, giving the drill a broad view across both policy and market operations. That mix matters because cyber stress in finance rarely stays inside one institution. Trouble can move from a bank to payment systems, into trading and settlement, and then into wider concerns about confidence. For markets, speed and coordination matter almost as much as the original technical fault.

This year’s sessions also built on the earlier 2024 exercise. The official statement says the 2026 round tested improvements identified through previous simulations and workshops, with a particular focus on incident response, recovery and crisis communication. That is the more useful signal for readers. A first exercise shows where the gaps are. A second exercise shows whether those gaps are being closed. In market terms, this was less about making a fresh promise and more about checking whether the response machinery now works better under pressure.

One of the more meaningful updates is the decision to adopt a long-term exercise strategy. The G7 group says that will increase the frequency and consistency of these simulations, which points to a more regular approach rather than occasional headline exercises. For the financial system, that is sensible. Cross-border finance runs continuously, and cyber risk does not wait for formal reviews or annual meetings. Repeated testing gives authorities a better chance of spotting weak communication lines, patchy recovery plans and conflicting public messages before a real incident exposes them.

For SME owners, investors and anyone watching market plumbing, the relevance is fairly direct. A serious cyber event can delay payments, interrupt dealing, unsettle pricing and shake confidence long before the full damage is known. When official communication is slow or inconsistent, the disruption can become worse than the initial breach. That is why the G7 keeps stressing coordination. Resilience is not only about stopping attacks at the perimeter. It is also about recovery, reconnection and keeping essential financial services available while technical teams contain the problem.

The G7 Cyber Expert Group says its role is to coordinate cybersecurity policy and strategy across member jurisdictions, with the aim of improving preparedness, building a shared view of the threat picture and encouraging a more aligned response to risk. Recent publications cited alongside the announcement cover AI and cybersecurity in 2025, reconnection best practice in 2025, and the transition to post-quantum cryptography in 2026. Taken together, the message is clear enough. Cyber risk is now part of financial stability work, not a side issue for IT departments. The 18 May 2026 update does not claim the system is risk-free. It shows that the G7 wants a faster, more joined-up response when the next real test arrives.