Context
The FCA has published its insights for firms on how frontier AI may affect cyber resilience, governance and vulnerability management. We’re making these insights widely available so that firms (particularly small to medium-sized firms) can learn from others, consider the insights in the adoption of AI models, and prepare for AI-enabled cyber threats.
Key points to note and next actions
Although frontier AI models can help firms identify and analyse their cyber vulnerabilities quicker, if used maliciously they can amplify cyber threats to firms’ safety and soundness, customers, market integrity, and financial stability.
The FCA has previously commented that these models represent a step-change in capability, with significant implications for cybersecurity and operational resilience. It has therefore been engaging with firms to understand how they were using, testing and preparing for frontier AI models with cyber capabilities, to learn more.
The main themes reported by firms were: vulnerability discovery is accelerating faster than firms’ ability to respond; frontier AI is becoming a test of organisational resilience, not just a tool; the value of frontier AI depends on the firm’s operating environment; frontier AI is making foundational cyber and operational resilience more important; and effective governance and human judgement remain critical.
The findings in the publication are covered under the following titles:
- Harness engineering (the environment, controls and processes around an AI model that make its outputs useful, safe and reliable);
- Preparing for a vulnerability wave; and
- Effective cyber and operational resilience foundations