Cybersecurity Policy Report, Recommendations for Mitigating AI Cyber Attacks Offered by Danish Financial Regulator, (Aug 24, 2026)

By Tony Foley

The Danish financial supervisory authority, Finanstilsynet, has provided recommendations for companies to strengthen their risk management, monitoring, and preparedness in the face of increasing cyber attacks conducted by advanced AI (artificial intelligence) models.

The recommendations, set forth in a Friday press release, noted that highly advanced AI models were enabling malicious actors to identify and exploit vulnerabilities in IT systems faster and on a larger scale than ever before. In July, the European Systemic Risk Board (ESRB) warned of the dangers posed by frontier AI models, saying that they significantly altered the threat landscape. Later that month, a joint statement from European Union financial supervisory authorities called on the sector to strengthen its resilience to cyber attacks.

Finanstilsynet said it shared the assessment of the ESRB and its fellow financial authorities and encouraged all financial companies to consider how AI-enabled cyber attacks might affect their businesses.

“AI is increasing the pace of cyber threats to the financial sector. The models can make it easier for attackers to find and exploit vulnerabilities faster and on a larger scale than before,” said Finanstilsynet Deputy Director Mette Tams Kitaj. “We therefore expect companies to look at what the changing threat landscape means for them and ensure that their risk management and preparedness can keep up.”

Finanstilsynet recommended that companies create an overview of how AI, including frontier models, was used internally and the risk it entailed, continuously assess how advanced AI affected their threat landscape, place clear responsibility for AI risks with the board of directors and management, ensure effective processes for monitoring vulnerabilities and handling security updates, update contingency and recovery plans to account for AI-driven cyber attacks and test relevant threat scenarios, provide access to the necessary AI and cybersecurity expertise, and share experience and knowledge about AI risks internally and with other players in the sector.

News: InternationalLegislation DataSecurity AINews