金融安全研究院將以 AI 強化雲端安全評估
Financial Security Institute to Strengthen Cloud Security Assessments With AI
金融安全研究院（FSI）將自 2027 年起，在雲端服務供應商（CSP）安全評估中引入 AI，並把檢查範圍擴大至外部暴露的正式、開發及測試系統。AI 評估自動化將用於識別需檢查的資產，以及高可能遭利用的漏洞。FSI 已於 2026 年進行試點評估，並確認新檢查方法有效；改良評估將適用於預先同意參與的雲端服務供應商。
(Image: Financial Security Institute)
The Financial Security Institute (FSI) said on Nov. 5 that it will introduce enhanced technical assessments under its Cloud Service Provider (CSP) Security Assessment program starting in 2027. The changes focus on using artificial intelligence (AI) to identify externally exposed assets and proactively detect security vulnerabilities.
Since 2023, FSI has assessed security vulnerabilities in cloud providers’ virtual resource management systems, including portals and consoles. Previous evaluations primarily relied on evidence reviews, on-site inspections and demonstrations. The scope will now expand to include externally exposed production, development and testing systems.
FSI will also introduce AI-based assessment automation to identify assets requiring inspection and detect vulnerabilities with a high likelihood of exploitation. The approach is intended to improve assessment efficiency and consistency of evaluation results.
FSI said it conducted pilot assessments involving selected cloud providers in 2026 and confirmed the effectiveness of the new inspection methods. The enhanced assessments will be fully implemented starting in 2027 for cloud providers that have agreed to participate in advance.
“Security vulnerabilities at cloud service providers can spread beyond individual companies and pose risks to the broader financial sector,” said Park Sang-won, president of FSI. “We will continue providing security support to ensure financial institutions can use cloud services with confidence.”
來源：The Elec · thelec.net