The Dubai Financial Services Authority (DFSA) has published a paper examining the potential impact of frontier and agentic AI on cyber resilience in finance. This development is significant as it highlights the regulator's efforts to understand and address the emerging challenges posed by advanced AI systems in the financial sector. The paper was developed in collaboration with the Cambridge Digital Innovation and Regulation Initiative, a renowned research institution.
The paper explores the potential implications of agentic systems, which can use connected tools and take actions under delegated authority, on cybersecurity, operational resilience, and third-party risk. According to the DFSA, such activity may become faster and harder to trace after an incident, making it essential for firms to understand the potential risks and develop strategies to mitigate them. The regulator's initiative is a crucial step towards enhancing cyber resilience in the financial sector.
Key Areas of Focus
The paper examines cyber resilience in four key areas: speed, reach, authority, and trust. The speed aspect considers whether firms can safely reduce significant cyber exposure before it has serious consequences. Reach looks at whether firms understand the shared technology and services they rely on, including those beyond direct suppliers. Authority covers whether actions by AI systems stay within their intended mandates, while trust examines whether firms can establish what happened, bring unfinished activity under control, and continue or restore critical operations.
The paper also highlights the potential risks associated with shared models, cloud infrastructure, and identity services, which may create dependencies that direct supplier ties do not always reveal. This emphasizes the need for firms to have a comprehensive understanding of their technology and service providers, as well as the potential risks and vulnerabilities associated with them. By examining these areas, the DFSA aims to promote a better understanding of the potential implications of frontier and agentic AI on cyber resilience in finance.
Industry Response and Next Steps
Bryan Zhang, Co-Creator at the Cambridge Digital Innovation and Regulation Initiative, added that the paper offers a common vocabulary for public and private sectors working on these issues together. The DFSA and the Cambridge Digital Innovation and Regulation Initiative will discuss the paper at the Dubai FinTech Summit on 2 November 2026, providing a platform for industry stakeholders to engage with the research and share their perspectives.
The DFSA has emphasized that the paper is meant to support research and is not regulatory guidance or a statement of policy. This approach allows the regulator to facilitate a broader discussion on the potential implications of frontier and agentic AI on cyber resilience in finance, without prematurely imposing specific regulatory requirements. By taking a collaborative and research-focused approach, the DFSA aims to promote a better understanding of the potential risks and opportunities associated with advanced AI systems in the financial sector.
By examining the potential implications of these technologies on cyber resilience in finance, the regulator aims to promote a more secure and resilient financial sector in the region.
- The need for firms to develop a comprehensive understanding of the potential risks and opportunities associated with frontier and agentic AI
- The importance of examining the potential implications of these technologies on cyber resilience in finance
- The need for regulators and firms to work together to develop a common vocabulary and approach to addressing these challenges
