Treasury pushes AI risk controls across financial sector

The U.S. Department of the Treasury has unveiled a major initiative aimed at strengthening cybersecurity and risk management for artificial intelligence across the financial services sector, marking a significant step in the government’s broader push to support secure AI adoption.

The effort, developed in collaboration with industry leaders and regulatory bodies, forms part of the administration’s wider AI Action Plan.

Over the coming weeks, the Treasury will release a series of six resources designed to help financial institutions manage the growing risks associated with AI while continuing to innovate.

Treasury Secretary Scott Bessent emphasized the strategic importance of the initiative, particularly as AI becomes more deeply embedded in financial systems.

“It is imperative that the United States take the lead on developing innovative uses for artificial intelligence, and nowhere is that more important than in the financial sector,” he said.

The initiative was delivered through the Artificial Intelligence Executive Oversight Group, a public-private partnership bringing together senior executives from financial institutions, federal and state regulators, and key industry stakeholders.

The group focused on identifying gaps in current AI practices and developing practical tools to address emerging cybersecurity risks.

Rather than imposing prescriptive rules, the framework aims to provide actionable guidance that institutions can adapt to their own operating environments.

The resources are expected to cover areas including governance, data management, transparency, fraud prevention and digital identity, reflecting the broad impact of AI across financial services.

Cory Wilson, Deputy Assistant Secretary for Cybersecurity and Critical Infrastructure Protection, said the initiative is intended to deliver real-world benefits for firms of all sizes.

“Treasury brought public and private sector partners together to develop practical tools that can effect real change in the financial sector,” he said, adding that the resources are particularly relevant for small and mid-sized institutions seeking to strengthen their cyber defenses.

The emphasis on practical implementation reflects growing recognition that AI risk is no longer theoretical.

Financial institutions are rapidly deploying AI across functions ranging from fraud detection and customer service to trading and risk management.

This expansion has introduced new vulnerabilities, particularly around data security, model integrity and operational resilience.

Industry leaders involved in the initiative have welcomed the approach, highlighting the importance of collaboration in addressing complex risks.

William S. Demchak, chairman and chief executive of PNC, said the partnership represents a meaningful step forward.

“By clearly identifying and addressing the associated risks, financial institutions - regardless of size - are now positioned to harness the full power of this transformative technology,” he said.

The initiative also reflects a broader shift in regulatory thinking. Rather than focusing solely on compliance, policymakers are increasingly prioritizing resilience and operational effectiveness.

This aligns with global trends, where regulators are placing greater emphasis on how institutions manage technology risks in practice, rather than simply documenting policies.

By addressing AI governance, cybersecurity and data practices in an integrated way, the Treasury aims to create a foundation for more secure and scalable AI adoption.

The resources are designed to help firms embed risk management into their AI strategies from the outset, rather than retrofitting controls after deployment.

At the same time, the initiative underscores the competitive dimension of AI development.

Strengthening the security of AI systems is seen not only as a risk management priority but also as a way to support the global adoption of U.S.-developed technologies.

For financial institutions, the message is clear. AI presents significant opportunities to enhance efficiency, improve customer outcomes and drive innovation.

However, realizing those benefits will depend on the ability to manage associated risks effectively.

As the Treasury begins releasing its guidance, firms across the sector will be looking to align their strategies with emerging best practices.

The success of the initiative will ultimately depend on how well institutions translate high-level principles into operational reality.

In an environment where technological change is accelerating, the balance between innovation and resilience is becoming a defining challenge.

The Treasury’s latest move suggests that collaboration between government and industry will play a critical role in shaping that balance.