ECB Demands AI Security Action Plans from Banks

The European Central Bank is demanding an AI security "action plan" from banks. They have four months to outline how they will protect against AI-based cyber threats. Banks must submit their action plan by October 31st to the Joint Supervisory Team. Claudia Buch, chair of the supervisory board, highlighted that AI can quickly identify vulnerabilities, making existing weaknesses more significant. She wants banks to accelerate vulnerability management, enhance monitoring, and verify third-party risk management. The ECB has extended the deadline for its annual Risk Questionnaire to February 2027 to help banks with this challenge. Buch also warned that quantum computing will impact cybersecurity and that post-quantum cryptography requires sustained investment. This matters because strong defenses against AI threats are crucial for the stability of financial systems.