The DFSA, the independent financial services regulator of the Dubai International Financial Centre (DIFC), released "Frontier and agentic AI: cyber resilience in the financial sector" on 30 October 2026. It wrote the paper with the Cambridge Digital Innovation and Regulation Initiative (C:>DIR), part of Financial Innovation for Impact.
The paper looks at how frontier AI could speed up some cyber activities, and how agentic systems, which can use connected tools and act under delegated authority, could make incidents faster, more adaptive and harder to reconstruct afterwards. It frames resilience as four questions: speed, whether a firm can cut serious exposure before harm follows; reach, whether it understands shared technology it depends on beyond its direct suppliers; authority, whether actions by AI systems stay within their mandate; and trust, whether it can establish what happened and restore critical operations.
The paper also points to hidden concentration. Shared models, cloud infrastructure, identity services, software components and recovery arrangements can create dependencies that a firm's own supplier relationships do not reveal. The authors draw on controlled evaluations, reported cyber incidents and international regulatory work.
DFSA chief executive Mark Steward said the paper should "prompt wider discussion" on how regulators and firms prepare. The DFSA states that the paper is not legal advice, regulatory guidance or a statement of policy, and that its safeguards do not signal supervisory requirements. Steward and C:>DIR co-creator Bryan Zhang will discuss it at the Dubai FinTech Summit on 2 November.
Read the source
Dubai Financial Services Authority ↗Regulator · 30 Oct 2026
This is an original brief based on the linked publication. Company statements and forecasts are attributed to their source.
