Here’s what DFS Secretary Nagaraju says about banks’ preparedness for emerging AI risks

As the landscape of artificial intelligence evolves rapidly, M. Nagaraju, Secretary of the Department of Financial Services, has emphasized the necessity for banks to enhance their preparedness against emerging AI risks. Speaking at a recent Indian Banks Association event, Nagaraju stressed the importance of continuous resilience testing and investment in cyber capabilities to counter the challenges posed by advanced AI models like Anthropic’s Claude Mythos. The introduction of Claude Mythos has raised significant concerns globally, as it is touted to possess the ability to analyze and exploit software vulnerabilities and previously undiscovered security flaws in legacy systems. Although access to this powerful tool has been limited to select tech companies for preview, its potential release in the market has sparked fears of dire repercussions if exploited by malicious entities. "I hope the banking sector is well-prepared for the eventual public release of Mythos in our country," Nagaraju warned, highlighting the devastating impact a single cyber-attack could have on interconnected markets. He pointed out that banks and financial institutions are particularly susceptible due to their reliance on outdated IT systems and the intricate web of connections among them. In light of this global uncertainty, Nagaraju underscored the need for risk management to become an integral part of banking culture. "Continuous resilience testing, strengthening incident response, and ensuring that business continuity plans are updated and practical are essential steps for banks," he stated. The discussion around AI, especially Claude Mythos, has captured the attention of regulators and governments worldwide. Recently, Finance Minister Nirmala Sitharaman met with top banking officials to address the increasing challenges posed by AI technologies. In a proactive measure, the Securities and Exchange Board of India (SEBI) announced the formation of a new task force dedicated to scrutinizing the cybersecurity risks associated with AI-driven models. The regulator has also issued a detailed advisory, urging regulated entities to conduct regular security audits and ensure that their operating systems and applications are immediately updated to address any identified vulnerabilities. Nagaraju pointed out that the interconnectedness with fintech companies, payment systems, capital markets, and global finance flows means risks can propagate rapidly, necessitating enhanced preparedness and collaboration. Furthermore, as banks transition to more digital operations, he highlighted the importance of customer protection in the face of increasingly sophisticated fraud schemes. Despite the cybersecurity concerns, Nagaraju noted that Indian banks currently possess strong balance sheets, improved asset quality, and enhanced governance standards, indicating a solid foundation amid the challenges ahead.