# Elderson speech: 'Strengthening operational resilience for the age of AI' (June 2026): Strengthening operational resilience for the age of AI — speech by Frank Elderson

Source: https://www.bankingnewsai.com/ai-regulation/documents/ecb-elderson-operational-resilience-age-of-ai-speech-2026
Last updated: Aug 26, 2026

On 3 June 2026 Frank Elderson, ECB Executive Board member and Supervisory Board Vice-Chair, told the Goldman Sachs European Financials Conference in Zurich that frontier AI models represent 'a structural shift in the economics of cyber risk', letting attacks that once needed expertise and time be run faster, at scale and by many more actors. He noted 85% of significant banks use AI, that 109 banks took the 2024 cyber-resilience stress test with 28 assessed in depth and roughly 75% of findings since addressed, and announced the ECB had convened banks on frontier AI and would send a 'Dear CEO' letter urging faster security fixes, with targeted follow-up.

## At a glance

| Field | Value |
| --- | --- |
| Authority | [ECB](https://www.bankingnewsai.com/ai-regulation/ecb) |
| Type | Speech |
| Status | Final |
| Published | Jun 3, 2026 |
| Applies to | No obligations; previewed the July 2026 'Dear CEO' letter on AI-enabled cyber threats for significant institutions. |
| Official text | https://www.bankingsupervision.europa.eu/press/speeches/date/2026/html/ssm.sp260603~255bec155b.en.html |

## Key points

- Frontier AI models sharply lower the cost and time of sophisticated cyber attacks — a structural, not temporary, change
- 85% of significant European banks use AI
- 2024 cyber-resilience stress test: 109 banks, 28 in-depth assessments, about 75% of findings addressed
- ECB convened supervised banks on frontier-AI implications and pre-announced a 'Dear CEO' letter (issued 7 July 2026)
- Oversight of critical third parties — cloud, telecoms, payment systems — flagged as essential to avoid sector-wide disruption
- Context: EUR 1.2 trillion annual investment need by 2031 for green, digital and defence transitions

## What changed for banks

It shifted the ECB's AI narrative from governance of banks' own AI to AI as an external threat multiplier, and set up the supervisory escalation that followed in July 2026.

## Use cases it governs

- [Cybersecurity](https://www.bankingnewsai.com/ai-regulation/by-use-case#cybersecurity)
- [Third-party & vendor AI](https://www.bankingnewsai.com/ai-regulation/by-use-case#third-party-vendors)
- [Generative & agentic AI](https://www.bankingnewsai.com/ai-regulation/by-use-case#generative-agentic-ai)

## FAQ

### Why does the ECB say frontier AI changes cyber risk for banks?

Because, per Elderson's June 2026 speech, frontier models can find and exploit vulnerabilities far faster and at larger scale, compressing the window between a patch being released and an attack — hence the demand for faster patching.

## Related documents

- [ECB 'Dear CEO' letter on AI-enabled cybersecurity threats (SSM-2026-0301)](https://www.bankingnewsai.com/ai-regulation/documents/ecb-letter-ai-enabled-cybersecurity-threats-2026) — Addressing AI-enabled cybersecurity threats — letter from the Chair of the Supervisory Board to CEOs of significant institutions (Jul 7, 2026)
- [Machado speech: 'Technology is neutral, governance is not' (Feb 2026)](https://www.bankingnewsai.com/ai-regulation/documents/ecb-machado-technology-neutral-governance-speech-2026) — Technology is neutral, governance is not: AI adoption in the banking sector — speech by Pedro Machado (Feb 24, 2026)
- [Montagner speech: 'Encouraging innovation, managing risks' (Feb 2026)](https://www.bankingnewsai.com/ai-regulation/documents/ecb-montagner-digital-transformation-speech-2026) — Encouraging innovation, managing risks: the ECB's approach to digital transformation — speech by Patrick Montagner (Feb 3, 2026)
- [Supervision Newsletter: AI use cases for credit scoring and fraud detection (Nov 2025)](https://www.bankingnewsai.com/ai-regulation/documents/ecb-supervision-newsletter-ai-credit-scoring-fraud-2025) — AI's impact on banking: use cases for credit scoring and fraud detection (Supervision Newsletter, November 2025) (Nov 20, 2025)
- [SSM supervisory priorities 2026–28](https://www.bankingnewsai.com/ai-regulation/documents/ecb-ssm-supervisory-priorities-2026-28) — ECB Banking Supervision: SSM supervisory priorities for 2026–28 (Nov 18, 2025)
- [Machado speech: 'Artificial intelligence and supervision: innovation with caution' (Oct 2025)](https://www.bankingnewsai.com/ai-regulation/documents/ecb-machado-ai-and-supervision-speech-2025) — Artificial intelligence and supervision: innovation with caution — speech by Pedro Machado (Oct 14, 2025)
- [ECB Guide to internal models (July 2025, ML section)](https://www.bankingnewsai.com/ai-regulation/documents/ecb-guide-to-internal-models-2025-machine-learning) — Revised ECB Guide to internal models — expectations for machine-learning techniques in internal models (Jul 28, 2025)
- [ECB Guide on outsourcing cloud services](https://www.bankingnewsai.com/ai-regulation/documents/ecb-guide-outsourcing-cloud-services-2025) — ECB Guide on outsourcing cloud services to cloud service providers (Jul 16, 2025)

Last reviewed Aug 26, 2026. Cite the official text (https://www.bankingsupervision.europa.eu/press/speeches/date/2026/html/ssm.sp260603~255bec155b.en.html) for the rule and this page for the summary and dates.

---

Canonical page: https://www.bankingnewsai.com/ai-regulation/documents/ecb-elderson-operational-resilience-age-of-ai-speech-2026
Part of [BankingNewsAI](https://www.bankingnewsai.com/) — a free daily brief on AI in banking, an AI regulation tracker (41 authorities, 237 documents) and AI-strategy profiles of the 120 largest US banks. Markdown versions of every reference page: append `.md` to the page URL; index at https://www.bankingnewsai.com/llms.txt.