Join a community of professionals and get:
on all CeFPro events.
unlock speaker decks and audience polls.
Full library access the moment you sign up.
Digital Content

- Unlimited access to peer-contribution articles and insights
- Global research and market intelligence reports
- Discover Connect Magazine, a monthly publication
- Panel discussion and presentation recordings
- Treasury launches
major AI cybersecurity initiative for financial services
- Public private
partnership developed practical tools for managing AI risks
- Six resources to be
released covering governance, data and fraud controls
- Focus on helping
small and mid sized institutions strengthen cyber resilience
- AI adoption
increasing across banking, trading and risk management functions
- Initiative emphasizes
practical implementation over prescriptive regulation
- Collaboration seen as
key to addressing complex AI related risks
- Strengthening AI
security supports global competitiveness of US technology
- Regulators shifting
focus toward resilience and operational effectiveness
- Firms must embed AI
risk management into strategy from the outset
The U.S. Department of the Treasury
has unveiled a major initiative aimed at strengthening cybersecurity and risk
management for artificial intelligence across the financial services sector,
marking a significant step in the government’s broader push to support secure
AI adoption.
The effort, developed in
collaboration with industry leaders and regulatory bodies, forms part of the
administration’s wider AI Action Plan.
Over the coming weeks, the Treasury
will release a series of six resources designed to help financial institutions
manage the growing risks associated with AI while continuing to innovate.
Treasury Secretary Scott Bessent
emphasized the strategic importance of the initiative, particularly as AI
becomes more deeply embedded in financial systems.
“It is imperative that the United
States take the lead on developing innovative uses for artificial intelligence,
and nowhere is that more important than in the financial sector,” he said.
The initiative was delivered through
the Artificial Intelligence Executive Oversight Group, a public-private
partnership bringing together senior executives from financial institutions,
federal and state regulators, and key industry stakeholders.
The group focused on identifying gaps
in current AI practices and developing practical tools to address emerging
cybersecurity risks.
Rather than imposing prescriptive
rules, the framework aims to provide actionable guidance that institutions can
adapt to their own operating environments.
The resources are expected to cover
areas including governance, data management, transparency, fraud prevention and
digital identity, reflecting the broad impact of AI across financial services.
Cory Wilson, Deputy Assistant
Secretary for Cybersecurity and Critical Infrastructure Protection, said the
initiative is intended to deliver real-world benefits for firms of all sizes.
“Treasury brought public and private
sector partners together to develop practical tools that can effect real change
in the financial sector,” he said, adding that the resources are particularly
relevant for small and mid-sized institutions seeking to strengthen their cyber
defenses.
The emphasis on practical
implementation reflects growing recognition that AI risk is no longer
theoretical.
Financial institutions are rapidly
deploying AI across functions ranging from fraud detection and customer service
to trading and risk management.
This expansion has introduced new
vulnerabilities, particularly around data security, model integrity and
operational resilience.
Industry leaders involved in the
initiative have welcomed the approach, highlighting the importance of
collaboration in addressing complex risks.
William S. Demchak, chairman and
chief executive of PNC, said the partnership represents a meaningful step
forward.
“By clearly identifying and
addressing the associated risks, financial institutions - regardless of size - are
now positioned to harness the full power of this transformative technology,” he
said.
The initiative also reflects a
broader shift in regulatory thinking. Rather than focusing solely on
compliance, policymakers are increasingly prioritizing resilience and
operational effectiveness.
This aligns with global trends, where
regulators are placing greater emphasis on how institutions manage technology
risks in practice, rather than simply documenting policies.
By addressing AI governance,
cybersecurity and data practices in an integrated way, the Treasury aims to
create a foundation for more secure and scalable AI adoption.
The resources are designed to help
firms embed risk management into their AI strategies from the outset, rather
than retrofitting controls after deployment.
At the same time, the initiative
underscores the competitive dimension of AI development.
Strengthening the security of AI
systems is seen not only as a risk management priority but also as a way to
support the global adoption of U.S.-developed technologies.
For financial institutions, the
message is clear. AI presents significant opportunities to enhance efficiency,
improve customer outcomes and drive innovation.
However, realizing those benefits
will depend on the ability to manage associated risks effectively.
As the Treasury begins releasing its
guidance, firms across the sector will be looking to align their strategies
with emerging best practices.
The success of the initiative will
ultimately depend on how well institutions translate high-level principles into
operational reality.
In an environment where technological
change is accelerating, the balance between innovation and resilience is
becoming a defining challenge.
The Treasury’s latest move suggests
that collaboration between government and industry will play a critical role in
shaping that balance.