Sebi Warns Market Participants of AI Tool Risks, Establishes Task Force for Oversight
The Securities and Exchange Board of India (Sebi) has raised critical concerns regarding the cybersecurity risks associated with advanced artificial intelligence (AI) tools, particularly in light of the introduction of models like Anthropic’s AI model, Mythos. In response, Sebi has initiated a task force named cyber-suraksha.ai, which includes representatives from various market infrastructure institutions (MIIs), qualified registrar and transfer agents (QRTAs), and other stakeholders. The regulator emphasized the rapid evolution of AI-driven tools capable of identifying system vulnerabilities at scale, which may inadvertently expose financial entities to enhanced cybersecurity threats, including those related to data confidentiality and the reliability of outputs.
The primary objective of the cyber-suraksha.ai task force is to conduct a comprehensive assessment of cybersecurity risks stemming from AI models and to devise effective mitigation strategies. The task force will facilitate the exchange of threat intelligence and best practices among participants, ensuring that market participants can effectively manage vulnerabilities in today’s interconnected ecosystem. Sebi highlighted the necessity for a coordinated approach to vulnerability management and information sharing in order to prevent potential cascading impacts across the securities market.
To bolster the cybersecurity frameworks of regulated entities, Sebi has issued an advisory outlining several precautionary measures. Recommendations include regular vulnerability assessments utilizing both traditional and AI-based tools, timely system patching, enhanced monitoring via security operations centres, and the implementation of robust API security measures. Additionally, market participants are encouraged to collaborate closely with third-party vendors to facilitate timely security updates and perform thorough risk assessments of AI-driven systems. The formation of the Market Security Operations Centre (M-SOC) for real-time monitoring and threat detection underscores Sebi’s commitment to addressing the rising risks associated with AI-enhanced cyber threats.
Source: The Economic Times
(Expert Note: This report was prepared by the Wealthova team.)