APRA Advocates for Strengthened AI Risk Management in Financial Institutions

In a letter addressed to industry stakeholders, APRA highlighted that current governance, risk management, assurance, and operational resilience practices are not keeping pace with the scale, speed, and complexity of AI adoption. The regulator's concerns stem from a targeted supervisory review conducted late last year, which examined AI deployment and governance across all regulated industries.

The review uncovered that the expanded use of advanced AI is introducing a range of new financial and operational vulnerabilities. Notably, information security practices are struggling to keep up with the pace of change, potentially exposing institutions to increased risks. APRA also warned that emerging AI models could enhance the discovery of vulnerabilities by malicious actors, thereby increasing the probability, speed, and scale of cyber attacks.

For small to medium business owners, entrepreneurs, and sole traders, this development underscores the importance of ensuring that their financial service providers are proactively managing AI-related risks. As AI becomes more prevalent in financial services, businesses should seek assurance that their insurers and financial institutions are adhering to robust risk management and governance frameworks.

APRA's call to action serves as a reminder for the financial sector to prioritise the development and implementation of comprehensive AI risk management strategies. By doing so, institutions can better protect themselves and their clients from potential AI-related vulnerabilities, thereby maintaining trust and stability within the industry.