Financial Security Institute to Strengthen Cloud Security Assessments With AI

The Financial Security Institute (FSI) said on Nov. 5 that it will introduce enhanced technical assessments under its Cloud Service Provider (CSP) Security Assessment program starting in 2027. The changes focus on using artificial intelligence (AI) to identify externally exposed assets and proactively detect security vulnerabilities.

Since 2023, FSI has assessed security vulnerabilities in cloud providers’ virtual resource management systems, including portals and consoles. Previous evaluations primarily relied on evidence reviews, on-site inspections and demonstrations. The scope will now expand to include externally exposed production, development and testing systems.

FSI will also introduce AI-based assessment automation to identify assets requiring inspection and detect vulnerabilities with a high likelihood of exploitation. The approach is intended to improve assessment efficiency and consistency of evaluation results.

FSI said it conducted pilot assessments involving selected cloud providers in 2026 and confirmed the effectiveness of the new inspection methods. The enhanced assessments will be fully implemented starting in 2027 for cloud providers that have agreed to participate in advance.

“Security vulnerabilities at cloud service providers can spread beyond individual companies and pose risks to the broader financial sector,” said Park Sang-won, president of FSI. “We will continue providing security support to ensure financial institutions can use cloud services with confidence.”