Aug 13 2025

Black Hat 2025: How Financial Institutions Can Maintain Compliance as AI Evolves

Banks and financial institutions must comply with many regulations and guidelines, including the Sarbanes–Oxley Act, the Gramm-Leach-Bliley Act and the Payment Card Industry Data Security Standard. While these set the security standards for institutions, going beyond the minimum bar set is important in today’s complex security environment, especially as customers continue to bank and engage in other financial activity online.

At Black Hat 2025 in Las Vegas, BizTech spoke with security experts on how artificial intelligence is changing the security picture for financial institutions and how they can better protect themselves and their customers.

DISCOVER: Learn what finance CISOs must know about artificial intelligence-driven cybersecurity.

To access all of our coverage from Black Hat 2025, click here and follow us on the social platform X at @BizTechMagazine, as well as the official conference account, @BlackHatEvents.

Participants

    David Schwed, CISO for Brokerage and Money, Robinhood

    Mikela Lea-Mason, Manager of Threat and Vulnerability Security Solutions, CDW

Video Highlights

  • AI is a helpful security tool that can detect intrusions faster, but it can also be used to convincingly impersonate bank members to get around security controls.
  • Red teaming exercises, vulnerability management, identity management and education on new toolsets are all important for financial institutions’ security posture.
  • Security isn’t binary. Financial institutions must constantly assess their organizations’ risks and controls to mitigate those risks.