The Dubai Financial Services Authority (DFSA) has published a paper on how frontier and agentic AI could change cyber resilience in finance.

The regulator developed it with the Cambridge Digital Innovation and Regulation Initiative.

Agentic systems can use connected tools and take actions under delegated authority.

Such activity may become faster and harder to trace after an incident. This has implications for cybersecurity, operational resilience and third-party risk.

The paper examines cyber resilience in four ways. Speed asks whether firms can safely reduce significant cyber exposure before it has serious consequences.

Reach considers whether they understand the shared technology and services they rely on, including those beyond direct suppliers.

Authority covers whether actions by AI systems stay within their intended mandates.

Trust looks at whether firms can establish what happened, bring unfinished activity under control, and continue or restore critical operations.

Shared models, cloud infrastructure and identity services may also create dependencies that direct supplier ties do not always reveal.

“This paper brings together emerging thinking and will prompt wider discussion on how regulators and firms can prepare for these developments,”

said Mark Steward, Chief Executive at the DFSA.

“These questions will not be settled by any single firm, regulator or jurisdiction, and we hope the paper offers a common vocabulary for public sectors and private sectors working on them together,”

said Bryan Zhang, Co-Creator at the Cambridge Digital Innovation and Regulation Initiative.

The paper draws on controlled evaluations, reported cyber incidents and international regulatory work.

According to the DFSA, it is meant to support research and is not regulatory guidance or a statement of policy.

Steward and Zhang will discuss the paper at the Dubai FinTech Summit on 2 November 2026.

Featured image: Edited by Fintech News UAE, based on image by DFSA via its website and mumemories via Magnific.