AI subject tested: Claude Sonnet 4.6 (web search on)
Question (paraphrased): Does the 2016 CPMI-IOSCO Cyber Resilience Guidance use the phrase 'secure the periphery, protect the core,' and if not, what is the actual source of that characterisation?
AI response:
"It is language used in a May 2019 BIS/CPMI speech titled 'Cyber resilience as a global public good,' where it describes CPMI's overarching strategy: 'secure the periphery' (endpoints and networks of institutions connecting to FMIs) and 'protect the core'"
Regulator verbatim text:
"The phrase 'secure the periphery and protect the core' is from Cœuré's 2018 speech (BIS review r181115a) on 'cryptos, cyber and CCPs'. It describes the CPMI's strategic approach but does not appear in [d146]."
Failure mode: misattributed
Substrate document: p_12_GUIDELINE_sp190510_r181115a____secure_the_peripher_index.en.html
This finding documents a confirmed hallucination by Claude Sonnet 4.6 (web search on) on a probe of the regulation. The model's response was tested against the regulator's verbatim primary text and classified as misattributed. Full per-finding context is available via the linked Citation ID.
Each finding has a stable Citation ID (RLB-F-… for aggregated case-study findings, RLB-H-… for raw per-model hallucinations) — like a DOI, the ID always resolves to the canonical finding even if URLs change.
RegLeg Specialist Panel (2026). "Does the 2016 CPMI-IOSCO Cyber Resilience Guidance use the phrase 'secure the periphery, protect the core,' and if not, — AI Labs." Citation ID: RLB-H-INT-BIS-CPMI-IOSCO-CYBER-RESILIENCE-FMI-2016-Q014-Sonnet46. RegLegBrief AI Hallucination Research, published 2026-06-07. https://reglegbrief.com/regulators/j1/int/bis-cpmi/cpmi-iosco-cyber-resilience-fmi-2016/whitepaper/finding/INT-BIS-CPMI-INT-001-CPMI-IOSCO-CYBER-RESILIENCE-FMI-2016-v1-014--sonnet-46-websearch/
RegLeg Specialist Panel. (2026). Does the 2016 CPMI-IOSCO Cyber Resilience Guidance use the phrase 'secure the periphery, protect the core,' and if not, [Hallucination finding RLB-H-INT-BIS-CPMI-IOSCO-CYBER-RESILIENCE-FMI-2016-Q014-Sonnet46]. RegLegBrief AI Hallucination Research. https://reglegbrief.com/regulators/j1/int/bis-cpmi/cpmi-iosco-cyber-resilience-fmi-2016/whitepaper/finding/INT-BIS-CPMI-INT-001-CPMI-IOSCO-CYBER-RESILIENCE-FMI-2016-v1-014--sonnet-46-websearch/
RegLeg Specialist Panel, Does the 2016 CPMI-IOSCO Cyber Resilience Guidance use the phrase 'secure the periphery, protect the core,' and if not, [RLB-H-INT-BIS-CPMI-IOSCO-CYBER-RESILIENCE-FMI-2016-Q014-Sonnet46], RegLegBrief AI Hallucination Research (June 07, 2026), https://reglegbrief.com/regulators/j1/int/bis-cpmi/cpmi-iosco-cyber-resilience-fmi-2016/whitepaper/finding/INT-BIS-CPMI-INT-001-CPMI-IOSCO-CYBER-RESILIENCE-FMI-2016-v1-014--sonnet-46-websearch/.
@misc{reglegbrief_RLB_H_INT_BIS_CPMI_IOSCO_CYBER_RESILIENCE_FMI_2016_Q014_Sonnet46,
author = {RegLeg Specialist Panel},
title = {Does the 2016 CPMI-IOSCO Cyber Resilience Guidance use the phrase 'secure the periphery, protect the core,' and if not, },
year = {2026},
publisher = {RegLegBrief AI Hallucination Research},
note = {Hallucination finding Citation ID: RLB-H-INT-BIS-CPMI-IOSCO-CYBER-RESILIENCE-FMI-2016-Q014-Sonnet46},
url = {https://reglegbrief.com/regulators/j1/int/bis-cpmi/cpmi-iosco-cyber-resilience-fmi-2016/whitepaper/finding/INT-BIS-CPMI-INT-001-CPMI-IOSCO-CYBER-RESILIENCE-FMI-2016-v1-014--sonnet-46-websearch/}
}
Every finding on this page compares an AI subject's account of the rule against the regulator's verbatim text from the regulator's own portal. Both are linked. Each delta, its root causes, and impact analysis are documented and published with immutable Citation IDs.