Speech by Blaise Metreweli, Chief of SIS, 15 December 2025

MI6 Chief Blaise Metreweli delivered a speech outlining an evolving security landscape driven by converging advanced technologies (AI, biotech, quantum) and heightened geopolitical competition, with particular focus on Russia's grey-zone tactics and information warfare. He emphasised MI6's shift to tech fluency, closer integration with MI5/GCHQ/Five Eyes and international partners, and the need for societal resilience against cyberattacks, influence operations and supply‑chain vulnerabilities—signaling continued emphasis on defence, intelligence cooperation and sanctions as policy levers rather than immediate market-moving fiscal or corporate actions.

Analysis

Market structure: Expect persistent demand uplift for homeland/foreign-intel and cyber capabilities—direct winners are large defense primes (Lockheed LMT, Northrop NOC, RTX) and enterprise cybersecurity/cloud operators (CRWD, PANW, MSFT, GOOGL). Supply-side pressure will concentrate at advanced node semiconductors (TSMC/ASML ecosystem; beneficiaries NVDA, AMD) tightening pricing power for AI chips; consumer ad-driven platforms and trust-dependent social media are structurally exposed to information-warfare headwinds. Cross-asset: likely small upward pressure on real yields (0–50bps over 6–12 months) as fiscal defense spending rises, a stronger USD and GBP softening risk appetite locally; gold and energy act as crisis hedges (+5–15% on episodic escalation).

Risk assessment: Tail risks include rapid kinetic escalation (low prob, high impact), systemic cyberattack on cloud providers, or export controls that sever Taiwan/US supply chains—each could knock 20–40% off affected chip suppliers short-term. Immediate (days) risks: headlines and sanctions; short-term (weeks–months): procurement/budget announcements and contract awards; long-term (years): structural AI regulation and re-shoring of chip fabs. Hidden dependencies: defense/cyber adoption tied to cloud providers and TSMC capacity; sanctions or a TSMC outage are concentrated single points of failure. Key catalysts: UK/EU/NATO budgets (next 3–12 months), major cyber incidents, and AI regulatory milestones (EU/US in 6–24 months).

Trade implications: Tactical long bias to defense and cyber and selective exposure to AI infra; prefer durable cash-flow defense names (LMT, NOC) and subscription cybersecurity (CRWD, PANW) with 6–24 month holding periods. Use NVDA/AMD for asymmetric AI exposure via long-dated LEAPs or call spreads (cost-cutting), and hedge macro/geopolitical drawdowns with 1–2% GLD and long-dated sovereign bond protection via short-duration positioning. Pair ideas: long LMT (2–3% portfolio) / short META (1–1.5%) to capture asymmetric re-rating if trust erosion continues; entry windows within 1–3 months ahead of budget announcements.

Contrarian angles: Consensus may overweight headline defense primes and NVDA; underfollowed opportunities include mid-cap cyber asset managers and specialist sensors (L3H, TE) and UK-listed defense (BAESY/BA.L) that trade at governance discounts—these could outperform if budgets accelerate. Risk of overregulation or fragmented tech blocs is underpriced: a severe export-control shock would hurt NVDA/AMD revenue but lift onshore foundry candidates and specialist FPGA/ASIC designers. Historical parallels: post-9/11 security capex cycles favoured primes and software providers for 3–7 years; expect similar multi-year reallocation but with greater tech concentration this cycle.

Key Decisions for Investors

• Establish a 2–3% long position each in Lockheed Martin (LMT) and Northrop Grumman (NOC) within 1 month to capture expected 3–7% incremental defence capex over 12–36 months; use a 12% trailing stop and trim into any >15% run-up.
• Allocate 2–3% to enterprise cybersecurity: equal-weight CrowdStrike (CRWD) and Palo Alto Networks (PANW) via cash buys; if implied vol >40% buy 6–12 month 10–15% OTM call spreads to cap cost and target 30–60% upside over 6–18 months.
• Take a 0.5–1.0% notional position in NVDA via Jan 2027 LEAP calls (e.g., 300C) or buy a 12–18 month call spread (to limit premium) as asymmetric AI-infrastructure exposure; hedge with 0.5% GLD and set a macro cut at a 20% drop in NVDA or market-wide risk-off spike.
• Implement a pair trade: long LMT (2%) vs short Meta Platforms (META) (1–1.5%) to express security-over-trust rotation; enter within 30–90 days and close if spread narrows <5% or after 12 months.
• Reduce duration in fixed income by shifting 25–50% of core bond exposure into short-duration Treasuries and 1% allocation to GLD as a crisis hedge; monitor UK/EU budget announcements and a major cyber incident over next 90 days as triggers to upweight defense/cyber exposure by another 1–2%.