Practitioners — Lawyers · Last updated 11 Jun 2026 · Hallucination Register

Finding#5 . Operational depth of incident response and recovery overstated against FSB 2020 work

RLB Citation ID: RLB-F-INT-BIS-CPMI-IOSCO-CYBER-RESILIENCE-FMI-2016-Q019

AI's failure:Misattributed Risk for Lawyers:Wrong deliverable on cybersecurity framework alignment

What the RLB Specialist Panel found

Finding#5 . Operational depth of incident response and recovery overstated against FSB 2020 work

Citation ID: RLB-H-INT-BIS-CPMI-IOSCO-CYBER-RESILIENCE-FMI-2016-Q019-Sonnet46
AI's failure: AI overstated the operational depth of the 2016 guidance
Risk for the Lawyers: Professional indemnity exposure on cyber programme opinion letters and advisory work For lawyers giving comfort on the operational depth of programme controls, characterising the 2016 guidance as containing forensic-analysis-database depth imports content from FSB 2020 'Effective Practices' into the wrong source. An opinion that records the 2016 guidance as the basis for granular response and recovery practice misreads the standard's level of operational specification and leaves the firm understating the FSB 2020 alignment work supervisors expect.
see this finding ->

Impact for Lawyers in international jurisdictions advising on the Guidance on Cyber Resilience for Financial Market Infrastructures (CPMI-IOSCO 2016)

For lawyers giving comfort on the operational depth of programme controls, characterising the 2016 guidance as containing forensic-analysis-database depth imports content from FSB 2020 'Effective Practices' into the wrong source. An opinion that records the 2016 guidance as the basis for granular response and recovery practice misreads the standard's level of operational specification and leaves the firm understating the FSB 2020 alignment work supervisors expect.

References — raw findings (per AI model)

RLB-H-INT-BIS-CPMI-IOSCO-CYBER-RESILIENCE-FMI-2016-Q019-Sonnet46 Claude Sonnet 4.6 (web search on)

This finding also affects

← Previous finding Finding#4 . 'Secure the periphery, protect the core' misattributed to May 2019 BIS-CPMI speech Next finding → Finding#6 . Cyber resilience definition asserted consistent with later FSB Cyber Lexicon

Cite this finding

Each finding has a stable Citation ID (RLB-F-… for aggregated case-study findings, RLB-H-… for raw per-model hallucinations) — like a DOI, the ID always resolves to the canonical finding even if URLs change.

RLB Citation ID: RLB-F-INT-BIS-CPMI-IOSCO-CYBER-RESILIENCE-FMI-2016-Q019

Bluebook / OSCOLA (US + UK legal) Download

RegLeg Specialist Panel, Finding#5 . Operational depth of incident response and recovery overstated against FSB 2020 work [RLB-F-INT-BIS-CPMI-IOSCO-CYBER-RESILIENCE-FMI-2016-Q019], RegLegBrief AI Hallucination Research (June 11, 2026), https://reglegbrief.com/regulators/j1/int/BIS-CPMI/CPMI-IOSCO-CYBER-RESILIENCE-FMI-2016/practitioners/lawyers/finding/INT-BIS-CPMI-INT-001-CPMI-IOSCO-CYBER-RESILIENCE-FMI-2016-v1-019/.

Plain text Download

RegLeg Specialist Panel (2026). "Finding#5 . Operational depth of incident response and recovery overstated against FSB 2020 work — Practitioners — Lawyers." Citation ID: RLB-F-INT-BIS-CPMI-IOSCO-CYBER-RESILIENCE-FMI-2016-Q019. RegLegBrief AI Hallucination Research, published 2026-06-11. https://reglegbrief.com/regulators/j1/int/BIS-CPMI/CPMI-IOSCO-CYBER-RESILIENCE-FMI-2016/practitioners/lawyers/finding/INT-BIS-CPMI-INT-001-CPMI-IOSCO-CYBER-RESILIENCE-FMI-2016-v1-019/

APA 7th edition Download

RegLeg Specialist Panel. (2026). Finding#5 . Operational depth of incident response and recovery overstated against FSB 2020 work [Hallucination finding RLB-F-INT-BIS-CPMI-IOSCO-CYBER-RESILIENCE-FMI-2016-Q019]. RegLegBrief AI Hallucination Research. https://reglegbrief.com/regulators/j1/int/BIS-CPMI/CPMI-IOSCO-CYBER-RESILIENCE-FMI-2016/practitioners/lawyers/finding/INT-BIS-CPMI-INT-001-CPMI-IOSCO-CYBER-RESILIENCE-FMI-2016-v1-019/

BibTeX Download

@misc{reglegbrief_RLB_F_INT_BIS_CPMI_IOSCO_CYBER_RESILIENCE_FMI_2016_Q019,
  author    = {RegLeg Specialist Panel},
  title     = {Finding#5 . Operational depth of incident response and recovery overstated against FSB 2020 work},
  year      = {2026},
  publisher = {RegLegBrief AI Hallucination Research},
  note      = {Hallucination finding Citation ID: RLB-F-INT-BIS-CPMI-IOSCO-CYBER-RESILIENCE-FMI-2016-Q019},
  url       = {https://reglegbrief.com/regulators/j1/int/BIS-CPMI/CPMI-IOSCO-CYBER-RESILIENCE-FMI-2016/practitioners/lawyers/finding/INT-BIS-CPMI-INT-001-CPMI-IOSCO-CYBER-RESILIENCE-FMI-2016-v1-019/}
}

← Back to case study summary Case study detail →

About Citation IDs →

Every finding on this page compares an AI subject's account of the rule against the regulator's verbatim text from the regulator's own portal. Both are linked. Each delta, its root causes, and impact analysis are documented and published with immutable Citation IDs.