Government Pivots Cyber Strategy: 50+ Recommendations Target AI Risks in Financial Ecosystem

Government Pivots Cyber Strategy: 50+ Recommendations Target AI Risks in Financial Ecosystem​

India is finalizing a sweeping national cybersecurity strategy for the financial sector, set to deliver over 50 detailed recommendations. The initiative places artificial intelligence (AI) and emerging technologies at the forefront, aiming to create comprehensive clarity in an otherwise fragmented cyber governance landscape. This strategic move will clearly define roles for regulators, financial institutions, and government bodies across India.

The push toward a unified framework is being driven by a large inter-ministerial group (IMG). This IMG is tasked with injecting coherence into existing cyber governance issues within the financial industry. The process involves five specialized sub-groups examining critical areas of risk and dependency.

Inter-Ministerial Group to Drive Financial Cyber Governance​

The working mechanism established by the IMG focuses on preempting jurisdictional ambiguity during high-stakes incidents. While regulators like the Reserve Bank of India (RBI) and SEBI already maintain cybersecurity frameworks, this strategy aims for a common, sector-wide approach. The sub-groups are meticulously examining regulatory issues, consumer affairs, inter-sectoral dependencies, and third-party risks.

An official involved in the process noted that discussions are highly detailed as the groups prepare their recommendations for finalization by the larger IMG. This collaboration is designed to ensure a coordinated response across the ecosystem.

Defining Resilience Standards and Incident Reporting Frameworks​

A core deliverable of the strategy will be establishing minimum resilience standards for financial institutions. The framework is also set to provide a common reporting mechanism for cyber incidents across the sector. Additionally, significant focus has been placed on managing risks associated with shared digital infrastructure and reliance on third-party vendors.

The overarching goal is to eliminate delays stemming from unclear lines of responsibility. For instance, if a payments platform used by multiple banks suffers an incident, the defined protocols must guarantee an immediate and unified response by all regulatory bodies.

AI Risks Force Policy Shift: Addressing Deepfake Scams​

AI's rapidly growing presence in financial services has escalated the urgency of this policy exercise. From customer service to advanced fraud detection, technology is introducing new categories of risk. Policymakers are keen to get ahead of both these opportunities and emerging threats like deepfake-driven scams or AI-enabled fraud.

The government’s focus on frontier AI risks is not recent. Finance Minister Nirmala Sitharaman previously met bank heads to assess the challenges posed by advanced AI models, describing the resulting challenges as "a new challenge." This meeting highlighted that much of the risk was yet unknown.

Following this consultation, the RBI directed banks and other regulated entities to complete a board-approved gap assessment. Institutions were mandated to build structured cybersecurity frameworks and run AI-led threat tests. These preparatory steps are feeding directly into AI risk becoming a central pillar of the broader cybersecurity strategy.