ESAs urge consistent supervision of frontier AI ICT risks
EBA, EIOPA and ESMA issued a joint statement calling for cross-sectoral, risk-based supervision of ICT risks from frontier AI models in EU financial services.
The three ESAs signal converging supervisory focus on frontier AI as a source of ICT and operational risk. Firms deploying or relying on advanced AI models should expect intensified scrutiny of governance, model risk management, third-party dependencies, and resilience under DORA.
Sets direction for EU-wide supervisory expectations on AI risk, affecting model governance, vendor oversight, and ICT resilience programs.
Action Required
Review AI governance frameworks, map frontier AI use cases, and align ICT risk controls with DORA and emerging ESA supervisory expectations.
Joint ESA statements typically shape national supervisory priorities and precede formal guidance, making early alignment strategically important.
Emerging supervisory expectations on frontier AI ICT risk require enhanced governance, model inventory, and third-party controls; assess readiness against DORA and ESA statement.
“EBA, EIOPA and ESMA published a statement calling for a cross-sectoral, risk-based and consistent supervisory approach to mitigate the ICT risks stemming from frontier AI models.”