August 5, 2026 · Decision research
Cyber Economic Warfare
Finding
The weakest assumption is using a clean historical market tape to infer that common-dependency cyber risk is not investable or operationally actionable. The evidence supports a narrow risk upgrade, not a broad macro move.
What changed
Current official evidence now centers on cloud and third-party concentration: the Bank of England's 2026 CORST is testing a cloud-service-provider and third-party disruption, while its 2026 H1 survey had cyberattack cited by 82% of respondents as a financial-system risk, 77% as challenging to manage, and 56% as likely to materialise.
Decision
Change action now at the control layer: keep broad beta, rates, and macro-hedge posture unchanged, but require a common-dependency map, settlement and liquidity stress test, and explicit cyber-loss and coverage limits.
Watch next
Treat a multi-firm outage that breaches payment or settlement impact tolerances, forces emergency liquidity or credit support, or produces multi-day broad-market or credit stress as the trigger to change macro exposure.