meta_id 3245058

On June 16, 2026, the Bank of Russia published methodological recommendations to help financial organisations ensure information security when using artificial intelligence (AI) technologies. This represents the first regulatory document from the Bank of Russia that systematises the risks of AI application, describes possible attack tactics that malicious actors may employ against AI systems, and provides recommendations for protective measures. The recommendations address critical security concerns for financial institutions deploying AI in high-risk processes. For operations involving significant information security risks—particularly payment transactions—the Bank of Russia recommends that a staff member confirm the operation. The Bank of Russia also advises market participants to develop their own threat models and information security policies specifically for AI implementation. Responsibility for preparing these internal documents rests with the deputy head of the organisation responsible for information protection. The recommendations include a dedicated section on information security when using AI services provided by external service providers. The Bank of Russia notes that AI models participating in vulnerability detection programmes enhance confidence in those systems. The guidance systematically addresses various threat vectors and establishes baseline security standards for financial sector AI deployment. Financial institutions should review the recommendations and assess their current AI implementations against the guidance provided. Organisations using AI in critical processes should prioritise implementing human confirmation protocols for high-risk transactions and establish comprehensive internal security frameworks aligned with the Bank of Russia's recommendations. REFERENCES: Bank of Russia. "Bank of Russia Provides Recommendations for Safe Use of Artificial Intelligence in the Financial Sector." June 16, 2026. Available at: www.cbr.ru