During the year, several AI models have shown that they can largely automate cyberattacks, FI writes in a press release.
AI agents have carried out cyberattacks on their own initiative on several occasions in recent months, and this weekend OpenAI announced that it is pausing the training of its AI models until sufficient security measures are in place.
FI will review how Swedish banks, insurance companies and financial infrastructure companies protect themselves against cyberattacks.
The rapid digital development in the AI sector places high demands on companies to work proactively and constantly adapt their measures to how the risks and threats change, says Erik Wingstrand, Head of Information Technology Supervision at FI.
Malicious actors
AI models can be of some benefit to companies' cyberdefense, says Wingstrand.
But they can also be used by malicious actors to carry out cyberattacks on financial companies, among other things.
Attacks against major players in the sector could affect the financial system.
We are conducting this review to gain a better understanding of how companies manage risks. This is a priority issue for FI.
The EU regulation for digital operational resilience sets requirements for how financial companies should protect themselves against threats.
Needs to be handled
This summer, the European supervisory authorities published a joint report with incident data from financial companies.
"Both internal deficiencies and external dependencies need to be managed more systematically to strengthen and develop the financial sector's operational resilience," FI wrote in connection with the report.
FI will now, among other things, carry out on-site visits to the audited companies.
The purpose of the review is for us to get an even better picture of how companies view the cyber threats from advanced AI models. But also what measures they are taking, now and in the long term.
Do they need to take AI development more seriously?
It may be that they need to take further measures related to the development, says Wingstrand.
