The Bank of Russia has published guidelines that will help financial institutions ensure information security when using artificial intelligence (AI) technologies. This is reported on the regulator's website.
This is the first document of the regulator, which systematizes the risks of using AI, describes possible tactics of attacks by intruders on systems. AI and recommendations on protective measures are given. For example, if a financial institution uses In critical processes with high information security risks, in particular in payment transactions, it is recommended that the operation be confirmed by an employee.
The Bank of Russia also recommends that market participants develop their own threat models and information security policies for working with AI. The Deputy head of the Information Security organization is responsible for the preparation of these internal documents.
One of the sections of the document concerns information security when using AI services provided by service providers. For example, if a vendor has an AI model that participates in a vulnerability detection program, it increases trust in it.
