← Back to updates
ESMA

ESMA

European Securities and Markets Authority

Medium Impact

ESAs urge risk-based mitigation of ICT risks from frontier AI models

Published

Jul 31, 2026

Topics

Digital operational resilience, Cybersecurity, Artificial intelligence, DORA, ICT risk management, Third-party risk management, Operational resilience

Executive Summary

The European Supervisory Authorities issued a statement on 31 July 2026 encouraging EU financial entities to respond proactively to ICT and cyber risks amplified by frontier AI models. The statement does not create new regulatory requirements and its annex is explicitly illustrative, but it signals a coordinated supervisory focus under existing frameworks, particularly DORA’s ICT risk management, testing, incident and recovery, and ICT third-party risk management requirements, as well as the AI Act framework for general-purpose AI models with systemic risk. The ESAs highlight that AI-enabled threat actors may accelerate vulnerability discovery, exploit shared infrastructure and amplify single points of failure. Firms are encouraged to adjust ICT controls across prevention, detection and management, including asset inventories, secure-by-design practices, continuous monitoring, patching, resilience testing, backup and recovery capabilities, supply-chain controls, and management body accountability. Critical ICT third-party providers should also expect AI-related risks to be reflected in ESA oversight engagement and examination activity during 2027.

What Changed

newCoordinated ESA supervisory signal on frontier AI cyber risk

Previous

Existing EU operational resilience rules applied technology-neutrally, without this ESA statement specifically framing frontier AI-enabled cyber threats as an urgent supervisory focus.

New

Financial entities are encouraged to act quickly and proportionately to enhance cybersecurity capabilities for AI-assisted threats, taking account of supervisory expectations and DORA proportionality.

modifiedICT risk management emphasis under DORA

Previous

DORA already required financial entities to maintain ICT risk management and operational resilience controls; the statement does not amend those legal requirements.

New

The ESAs expect firms to assess whether existing DORA-aligned controls remain adequate given shorter AI-enabled vulnerability discovery and exploitation cycles.

newThree mitigation strategy model

Previous

No new ESA checklist or template existed in this statement’s form for frontier AI-related ICT risk mitigation.

New

Entities may consider measures such as updated asset inventories, secure-by-design controls, access management, supply-chain monitoring, continuous vulnerability scanning, behavioural monitoring, resilience testing, and improved backup and recovery.

modifiedManagement body and risk appetite focus

Previous

Management body accountability and risk appetite expectations already existed through operational resilience and governance frameworks.

New

Firms should review risk appetite metrics, tolerance thresholds and controls for risks arising from internal use of frontier AI models and indirect exposure to AI-enabled threats.

newCritical ICT third-party provider oversight focus for 2027

Previous

The statement does not identify a prior AI-specific CTPP oversight cycle in the same terms.

New

AI-related threats are expected to inform the 2027 Oversight Plan, oversight examinations and other oversight activities assessing CTPP preparedness and resilience.

Business Impact

Who is affected

Directly affected

EU financial entities subject to DORA, including banks, insurers, investment firms, trading venues, central securities depositories, central counterparties, payment and e-money institutions, crypto-asset service providers where in scope, and other regulated financial entities.

Indirectly affected

ICT third-party service providers, cloud providers, SOC providers, software and hardware suppliers, open-source dependency owners, AI tool providers, internal audit, external assurance providers and critical ICT third-party providers subject to ESA oversight.

Jurisdictions

European Union

Business processes

ICT risk management framework maintenance, Cyber threat and vulnerability management, Patch and configuration management, Security operations centre monitoring and escalation, Incident response and regulatory incident reporting preparation, Business continuity and disaster recovery planning, Operational resilience and threat-led testing, ICT third-party and supply-chain risk management, Management body risk reporting and risk appetite review

Estimated effort

Medium

Compliance risk

High

Affected Reports

ICT asset inventory and criticality registerVulnerability scanning, patching and remediation dashboardCyber incident response and escalation playbooksBusiness continuity and disaster recovery test evidenceICT third-party and supply-chain cyber risk assessment
FieldValidation rule

Recommended Actions

7 suggested next steps· derived from source analysis
  1. 1
    Confirmed actionStep 1 of 7

    because the ESA annex is illustrative and does not create additional requirements, map its prevention, detection and management examples to existing DORA controls rather than treating it as a new standalone rulebook.

  2. 2
    AI generatedStep 2 of 7

    Refresh the ICT risk assessment to capture AI-assisted vulnerability discovery, exploitation of shared infrastructure, dependency concentration, single points of failure and indirect exposure through ICT third parties.

  3. 3
    AI generatedStep 3 of 7

    Update board and senior management reporting so risk appetite metrics, tolerance thresholds, escalation triggers and investment decisions explicitly cover frontier AI-related cyber risk.

  4. 4
    AI generatedStep 4 of 7

    Prioritise remediation of open ICT and security findings, especially issues already identified through supervisory activity, penetration testing, red teaming, audits or the 2024 cyber-resilience stress-test context referenced by the ESAs.

  5. 5
    AI generatedStep 5 of 7

    Move high-risk systems toward more continuous detection and response by enhancing asset inventories, vulnerability scanning, behavioural monitoring, logging, patch automation and SOC escalation procedures.

  6. 6
    AI generatedStep 6 of 7

    Revise incident response, business continuity, backup and disaster recovery scenarios to include AI-assisted multi-system attacks and simultaneous third-party or infrastructure failures.

  7. 7
    AI generatedStep 7 of 7

    Engage critical and material ICT third-party providers on their AI-enabled cyber-risk controls, supply-chain monitoring, backup segregation, incident communication and resilience-testing evidence.

Timeline

other

Jun 25, 2026

The European Systemic Risk Board issued a warning on systemic cyber risks stemming from frontier artificial intelligence models, referenced by the ESA statement.

other

Jul 7, 2026

The European Commission published its Action Plan on Cybersecurity and Artificial Intelligence, referenced by the ESAs as context for the statement.

publication

Jul 31, 2026

The ESAs published statement JC 2026 25 on a consistent and risk-based approach for ICT risks from frontier AI models.

implementation

2027

The ESAs state that insights from targeted engagement with relevant critical ICT third-party providers have informed the annual risk assessment cycle and prioritisation of activities under the 2027 Oversight Plan; AI-related threats are expected to be reflected in oversight examinations and other oversight activities in 2027.

Sources

AI-generated analysis is based on the following primary sources. Always verify against the official publication.

Related Evidence

Verified source support for this analysis

The evidence agent checks whether the drafted finding is supported by official publications and relevant public source material.

Receive updates like this by email

Get AI-generated analysis for the regulators and topics you care about.

Pulse is built by Datox. Datox automates AIFMD Annex IV and SEC Form PF reporting end to end.

See the Datox platform