The Dubai Financial Services Authority (DFSA) has published an insights paper examining how frontier and agentic artificial intelligence (AI) could challenge financial institutions’ cyber resilience. The analysis considers how faster, more adaptive cyber activity and AI systems acting through connected tools under delegated authority could affect critical operations and make incidents harder to reconstruct. The paper assesses whether institutions can reduce significant cyber exposures before serious consequences arise and understand technology dependencies extending beyond direct suppliers. Reliance on shared AI models, cloud infrastructure and other common services may create dependencies that direct supplier relationships do not reveal. It also examines whether consequential actions by AI systems remain within their intended mandates and whether institutions can establish what happened, contain unfinished activity and reliably maintain or restore critical operations. Developed with the Cambridge Digital Innovation and Regulation Initiative, the paper supports research and international discussion. It does not constitute regulatory guidance or a statement of DFSA policy, and its analytical tools and illustrative safeguards do not create or signal supervisory requirements. The paper will be discussed at the Dubai FinTech Summit on November 2, 2026.
Dubai Financial Services Authority publishes analysis of cyber resilience risks from frontier and agentic AI
The Dubai Financial Services Authority has published a paper assessing how frontier and agentic artificial intelligence could accelerate cyber activity and complicate financial institutions’ control of critical operations. It examines timely reduction of cyber exposures, dependencies beyond direct suppliers, limits on delegated authority and reliable recovery. The analysis does not create or signal supervisory requirements.