The FSB first assessed AI in financial services in 2017. The 2024 update identifies four headline developments that were nascent or nonexistent at that time:
Multi-layered neural networks now handle complex, unstructured data with high accuracy, enabling pattern recognition at scale across text, images, and voice.
The volume and variety of available data has grown dramatically. Firms now process satellite images, social media feeds, and transaction records simultaneously.
GPUs now handle mass parallel calculations cheaply, making previously cost-prohibitive model training feasible for large financial institutions.
ChatGPT (Nov 2022) marked a step-change. LLMs allow ordinary language interaction with machines, dramatically lowering barriers to AI adoption across financial services.
Exam tip: The FSB distinguishes supply-side (primary driver since 2017) vs demand-side drivers. Supply-side factors have driven the most significant changes.
Supply-side factors represent what became technologically and commercially possible. The FSB groups these into three categories:
The FSB identifies three demand-side drivers that have remained consistent since 2017. They have not materially changed but continue to reinforce AI uptake.
AI improves profitability through four channels:
Increasing regulatory requirements across jurisdictions:
The FSB uses an activity-based framework. Be able to classify a given use case by type and recognize which AI techniques apply.

Key caveat: Actual customer-facing AI adoption remains low (under 6.7% of US financial firms as of mid-2024). Survey data is skewed toward large firms.
Financial authorities are themselves adopting AI to supervise FIs more effectively. 59% of surveyed authorities used AI-based supervisory tools in 2023, up 5pp from 2022.
64 financial regulators reported organisational skills deficiencies in data science & IT.
This matters because:
The asymmetry: FIs are building AI capabilities faster than regulators can evaluate them, creating a monitoring gap that is itself a financial stability risk.
Exam angle: SupTech is both a solution and itself subject to data, governance, and skills constraints.
VULNERABILITY 1: MOST STRUCTURALLY COMPLEX
Arises from three interdependent dynamics: increasing use of AI, concentration of AI supply chains, and criticality of the services those chains enable.
AI models require GPUs & ASICs for training and deployment. Design and fabrication markets dominated by very few firms.
FIs either purchase chips directly or rent capacity through cloud providers.
CSPs supply compute, host LLMs, and provide API access. Major CSPs both train & distribute models.
FIs incur indirect cloud exposure through specialized AI service providers.
Training LLMs from scratch is cost-prohibitive. Most FIs rely on pre-trained models from few providers.
Vendor-provided risk models for fraud, credit scoring, & cyber defence.
Vertical integration amplifies risk: Certain firms provide hardware, software, cloud, and models simultaneously, creating concentration across all layers.

The FSB concludes: AI infrastructure exhibits increasing returns to scale. The critical policy question: could a single provider failure become a systemic event?
Greatest concentration risk: Hardware (GPU design & fabrication). Model training is more competitive. Cloud access is intermediate risk.
VULNERABILITY 2
When many FIs use the same AI models and training data, predictions and strategies converge. This invisible herding creates correlated risk.
AI correlations are most dangerous in highly automated markets. Semi-automated treasury systems reacting in real time could create synchronized deposit outflows.
If AI enables truly customized investment strategies, it could reduce correlations. Net effect depends on differentiation vs common-platform efficiency.
VULNERABILITY 3
AI changes the cyber threat landscape in two ways: it empowers attackers & increases the attack surface.
Short-run asymmetry: Malicious actors adopt GenAI without guardrails. In the near term, attackers may benefit more from AI breakthroughs than defenders.
VULNERABILITY 4
AI introduces features that make model risk harder to manage than in traditional quantitative models. Three issues combine.
Deep learning & LLM models are opaque. When a model cannot explain its reasoning:
Modern AI trains on massive, heterogeneous datasets FIs are unaccustomed to evaluating:
Low-cost, easy-deploy AI leads to rapid adoption without controls:
VULNERABILITY 5
Three additional risks tied specifically to GenAI capabilities & AI behavior in complex environments.
AI systems optimize their objective without regard for unintended consequences:
Three longer-term dynamics affecting financial stability. Not near-term vulnerabilities, but exam-relevant for systemic context.
If custom AI is key, large FIs gain structural advantage. If off-the-shelf GenAI wins, smaller FIs can compete. Outcome determines consolidation pressure.
GenAI threatens high-skill cognitive work (unlike prior automation of routine tasks). Labour market disruptions could affect output, wages, inflation, and financial stability.
AI accounts for ~1% of global energy consumption, growing. Model inference may exceed training energy as end-user applications scale.

Existing frameworks address many but not all AI vulnerabilities. AI developments require additional policy considerations.
Surveys, reporting, disclosure
regimes for FI & AI provider
engagement to fill data gaps
on AI adoption patterns
International cooperation among
financial authorities, share best
practices, leverage SupTech tools
for supervision
Evaluate domestic & international
regulatory frameworks for fitness
against AI-specific risks that
existing rules may not cover
Key exam point: No single jurisdiction or authority can address these issues alone. The cross-border nature of AI supply chains requires international coordination among financial authorities, data regulators, and privacy bodies.