As AI poses threat to critical financial systems, how regulators are stepping up vigil

Indian regulators are intensifying their focus on cybersecurity, particularly in light of the growing threats posed by artificial intelligence (AI) to critical financial systems. The Reserve Bank of India (RBI) and the Securities and Exchange Board of India (SEBI) have both highlighted the need to safeguard vital components of the financial ecosystem from the rising cyber risks associated with AI.

SEBI recently introduced an IT Resilience Index (ITRI) for market infrastructure institutions, including clearing corporations and exchanges, to assess their cyber readiness. The RBI has also unveiled a comprehensive cybersecurity framework for banks and financial institutions, emphasizing board-level ownership of cyber risks, dedicated committees, and swift incident reporting.

Both regulators are closely monitoring AI's potential to facilitate fraud, such as deepfake voices bypassing Know Your Customer (KYC) norms, and sophisticated scams targeting financial services institutions. SEBI's ITRI, which evaluates cyber resilience through nine parameters, will become mandatory for market infrastructure institutions starting early 2027.

The regulator has also aligned its cyber incident reporting portal with a standardized reporting format to facilitate timely disclosure. SEBI is expected to soon release guidelines for responsible AI and machine learning use in the market. While regulators have taken significant steps to strengthen cyber defenses, they must remain adaptable as AI-driven threats evolve rapidly.