AI-Assisted Vulnerability Detection & Remediation

As frontier AI models continue to evolve, banks need practical tools to evaluate how their core service providers are identifying and managing emerging cybersecurity risks.

Developed in collaboration with ABA member experts across cybersecurity, third-party risk, core provider, and AI working groups—and informed by input from partner organizations including the Cyber Risk Institute and FS-ISAC—this questionnaire is designed to help banks assess provider preparedness for risks associated with advanced AI models.

The questionnaire enables ABA member banks to request information directly from core service providers and support their third-party risk management efforts. It is organized into 11 sections and references established frameworks, standards, and regulatory expectations.

Please note: ABA will not collect provider responses. Banks are responsible for managing responses directly with their service providers, including the use of NDAs or other confidentiality protections where appropriate.

ABA encourages core service providers to respond in sufficient detail to help banks evaluate risk and align with cybersecurity, third-party risk management, and regulatory expectations.