AI & Automation

Only developments with a defensible application to financial services operations, governance or client servicing. Each item states the opportunity, the control consideration and the action to take.

Last refreshed: 1 Oct 2026, 14:29

2026-09-23

EBA E-mail alert 23 September, 2026

EBA E-mail alert 23 September, 2026 Date 23/09/2026 Anonymous (not verified) Wed, 09/23/2026 - 17:00 News & Press ESAs call for vigilance over external dependencies, cyber threats and private credit risks

Opportunity

Use this development to test whether AI or automation can improve resilience, evidence quality or client service without weakening operational accountability.

Risk & control

Confirm accountable ownership, model or vendor due diligence, data handling and evidence of human oversight before scale-up.

Learning action

In your next leadership discussion, ask what business outcome is expected, which control owner is accountable and how the result will be independently evidenced.

European Banking Authority

2026-09-21

One does not simply defend agentically

Defenders can’t use AI in the same way attackers can, but there’s much they can do to unlock the potential of agentic cyber defence.

Opportunity

Use this development to test whether AI or automation can improve resilience, evidence quality or client service without weakening operational accountability.

Risk & control

Confirm accountable ownership, model or vendor due diligence, data handling and evidence of human oversight before scale-up.

Learning action

In your next leadership discussion, ask what business outcome is expected, which control owner is accountable and how the result will be independently evidenced.

UK National Cyber Security Centre

2026-09-17

Adversary simulation: what you need to know

Adversary simulation ('red teaming') tests your ability to prevent, detect and respond to cyber attacks.

Opportunity

Use this development to test whether AI or automation can improve resilience, evidence quality or client service without weakening operational accountability.

Risk & control

Confirm accountable ownership, model or vendor due diligence, data handling and evidence of human oversight before scale-up.

Learning action

In your next leadership discussion, ask what business outcome is expected, which control owner is accountable and how the result will be independently evidenced.

UK National Cyber Security Centre