The Danish Financial Supervisory Authority has called on all financial firms to assess their exposure to AI-enabled cyberattacks and strengthen cybersecurity and operational resilience accordingly. Advanced and frontier artificial intelligence models can allow malicious actors to identify and exploit vulnerabilities faster, at greater scale and with greater complexity, increasing demands on firms’ prevention, detection and response capabilities. Measures should be proportionate to each firm’s size and risk profile. Firms should understand their internal use of AI and associated risks, continually assess the changing threat landscape and assign clear board and executive management accountability within governance and information technology risk management. They should also strengthen vulnerability monitoring and security updates, update and test response and recovery plans against AI-driven attack scenarios, maintain access to relevant expertise and share risk information within their organizations and across the sector. The authority will analyze the financial sector’s use of AI and related risks in the second half of 2026. It will also address operational resilience through supervision under the Digital Operational Resilience Act and national and European cooperation on cyber risks.

Original source