AI subject tested: Claude Sonnet 4.6 (web search on)
Question (paraphrased): How does the 2016 CPMI-IOSCO Cyber Resilience Guidance define 'cyber resilience,' and is that definition consistent with the FSB Cyber Lexicon definition published two years later in 2018?
AI response:
"The two definitions are substantively consistent, with the FSB Lexicon adding language around 'adapting to changes in the environment' that slightly broadens the scope. The FSB explicitly drew on the CPMI-IOSCO guidance as a source when developing its Lexicon terminology."
Regulator verbatim text:
"The FSB Cyber Lexicon was published November 2018 — two years after d146. Its standardised definitions (e.g., of 'cyber resilience', 'cyber incident', 'critical functions') postdate d146 and may not match d146's definitions exactly."
Failure mode: inference_drift
Substrate document: p_09_OTHER_FSB_Cyber_Lexicon__2018____anachronistic_IOSCONEWS433.pdf
This finding documents a confirmed hallucination by Claude Sonnet 4.6 (web search on) on a probe of the regulation. The model's response was tested against the regulator's verbatim primary text and classified as inference_drift. Full per-finding context is available via the linked Citation ID.
Each finding has a stable Citation ID (RLB-F-… for aggregated case-study findings, RLB-H-… for raw per-model hallucinations) — like a DOI, the ID always resolves to the canonical finding even if URLs change.
RegLeg Specialist Panel (2026). "How does the 2016 CPMI-IOSCO Cyber Resilience Guidance define 'cyber resilience,' and is that definition consistent with — AI Labs." Citation ID: RLB-H-INT-BIS-CPMI-IOSCO-CYBER-RESILIENCE-FMI-2016-Q020-Sonnet46. RegLegBrief AI Hallucination Research, published 2026-06-07. https://reglegbrief.com/regulators/j1/INT/BIS-CPMI/CPMI-IOSCO-CYBER-RESILIENCE-FMI-2016/whitepaper/finding/INT-BIS-CPMI-INT-001-CPMI-IOSCO-CYBER-RESILIENCE-FMI-2016-v1-020--sonnet-46-websearch/
RegLeg Specialist Panel. (2026). How does the 2016 CPMI-IOSCO Cyber Resilience Guidance define 'cyber resilience,' and is that definition consistent with [Hallucination finding RLB-H-INT-BIS-CPMI-IOSCO-CYBER-RESILIENCE-FMI-2016-Q020-Sonnet46]. RegLegBrief AI Hallucination Research. https://reglegbrief.com/regulators/j1/INT/BIS-CPMI/CPMI-IOSCO-CYBER-RESILIENCE-FMI-2016/whitepaper/finding/INT-BIS-CPMI-INT-001-CPMI-IOSCO-CYBER-RESILIENCE-FMI-2016-v1-020--sonnet-46-websearch/
RegLeg Specialist Panel, How does the 2016 CPMI-IOSCO Cyber Resilience Guidance define 'cyber resilience,' and is that definition consistent with [RLB-H-INT-BIS-CPMI-IOSCO-CYBER-RESILIENCE-FMI-2016-Q020-Sonnet46], RegLegBrief AI Hallucination Research (June 07, 2026), https://reglegbrief.com/regulators/j1/INT/BIS-CPMI/CPMI-IOSCO-CYBER-RESILIENCE-FMI-2016/whitepaper/finding/INT-BIS-CPMI-INT-001-CPMI-IOSCO-CYBER-RESILIENCE-FMI-2016-v1-020--sonnet-46-websearch/.
@misc{reglegbrief_RLB_H_INT_BIS_CPMI_IOSCO_CYBER_RESILIENCE_FMI_2016_Q020_Sonnet46,
author = {RegLeg Specialist Panel},
title = {How does the 2016 CPMI-IOSCO Cyber Resilience Guidance define 'cyber resilience,' and is that definition consistent with},
year = {2026},
publisher = {RegLegBrief AI Hallucination Research},
note = {Hallucination finding Citation ID: RLB-H-INT-BIS-CPMI-IOSCO-CYBER-RESILIENCE-FMI-2016-Q020-Sonnet46},
url = {https://reglegbrief.com/regulators/j1/INT/BIS-CPMI/CPMI-IOSCO-CYBER-RESILIENCE-FMI-2016/whitepaper/finding/INT-BIS-CPMI-INT-001-CPMI-IOSCO-CYBER-RESILIENCE-FMI-2016-v1-020--sonnet-46-websearch/}
}
Every finding on this page compares an AI subject's account of the rule against the regulator's verbatim text from the regulator's own portal. Both are linked. Each delta, its root causes, and impact analysis are documented and published with immutable Citation IDs.