Bloomberg Talks: ESMA Chair Talks AI Cyber Security Risks
Date: May 6, 2026
Host: Bloomberg
Guest: Verena Ross, Chair, European Securities and Markets Authority (ESMA)
Episode Overview
This episode centers on Verena Ross, Chair of ESMA, discussing the intersection of Artificial Intelligence (AI), cybersecurity risks, and the evolving regulatory landscape in European financial markets. Key topics include the impact of AI on cyber threats, how financial entities are adapting, and the progression towards the EU's Capital Markets Union (now Savings and Investments Union). Ross also addresses impetus for change within EU markets and the role of international dynamics.
Key Discussion Points & Insights
1. AI and Cybersecurity in Financial Markets
-
Monitoring AI Developments:
Ross emphasizes ESMA’s proactive monitoring of how AI is rapidly changing the cyber environment within the financial sector.
"AI is speeding up some of the cyber environment significantly and that means that we need to be conscious that financial entities are also stepping up their cyber protections in this environment."
— Verena Ross [00:55]
-
Regulatory Collaboration and DORA:
ESMA works under the Digital Operational Resilience Act (DORA), coordinating with national authorities and other financial regulators (banking, insurance) to oversee cyber resilience.
"...working with the national authorities and with our sister authorities on banking and insurance to make sure that we watch very carefully how these new AI developments are changing the cyber landscape, what financial entities need to do to, in a much speedier way, be able to patch and protect themselves."
— Verena Ross [01:14]
-
Oversight of Critical Third-Party Providers:
ESMA is involved in direct oversight of providers crucial to EU financial infrastructure, ensuring these third parties also support cybersecurity and resilience measures.
"...the oversight body for certain critical third party party providers that are providing critical third party services to EU entities. And so we are also through that lens, talking directly to them..."
— Verena Ross [01:30]
2. Financial Entities’ Preparedness for AI Risks
-
Long-standing Exposure to Cyber Threats:
Ross notes that financial services have been targets of cyberattacks for years, but AI introduces new, faster-moving risks.
"Financial services entities have always over the last few years, been a key target for some of the cyber attacks and scams... But what the recent AI developments are clearly bringing is a speed of new possibilities that is accelerating massively..."
— Verena Ross [02:24]
-
Need for Rapid Adaptation:
Many financial entities must increase their pace of adaptation to keep up with AI-accelerated threats.
"...that is presenting a risk which I think many of them still have to adapt to."
— Verena Ross [02:44]
3. EU Market Integration and Capital Markets Union
-
Regulatory Evolution:
The conversation shifts to major upcoming regulatory proposals aimed at further integrating European capital markets—the market integration and supervision package, as part of the transition from Capital Markets Union to Savings and Investments Union.
"The Commission put forward a very complete and ambitious proposal at the end of last year... there is strong support for making a real step change in this area to creating more integrated capital markets that are basically less fragmented..."
— Verena Ross [03:22–03:41]
-
Harmonization and Efficiency:
The changes aim to reduce market fragmentation, lower complexity, and foster innovation, particularly through the adoption of new technology and better interlinked market infrastructure.
"...reducing some of the complexity and potential for divergent outcomes, interlinking market infrastructure and in creating a more innovative environment where also market infrastructure and new types of technology can be used..."
— Verena Ross [03:37]
4. Momentum and Drivers for Change
-
Acceleration in Policy and Ambition:
Ross highlights a notable acceleration in the drive for market integration, influenced by Europe’s funding needs, fiscal constraints, and the desire for diverse financing beyond traditional banking.
"I can certainly see an acceleration and a step up in admission... making sure that the capital markets can support some of the funding needs that Europe has given more fiscal constraints."
— Verena Ross [04:41]
"...there's a really complex package of measures that needs to be considered to make a step change."
— Verena Ross [05:25]
-
Broader Strategic Considerations:
When asked about international factors (e.g., US-EU relations), Ross firmly grounds the impetus for change in the needs of European markets rather than external influences.
"The key driver is that we need stronger European capital markets... But at the same time we need to have a capital market system in the EU that is able to provide the funding opportunities for companies and the investment opportunities for citizens."
— Verena Ross [05:51–06:34]
Notable Quotes & Memorable Moments
-
On AI's Impact:
"AI is speeding up some of the cyber environment significantly..."
— Verena Ross [00:55]
-
On EU's Approach:
"Europe remains part of a global financial system, that is clear. But at the same time we need to have a capital market system in the EU that is able to provide the funding opportunities for companies and the investment opportunities for citizens."
— Verena Ross [06:16]
-
On the Complexity of Reform:
"...there's a really complex package of measures that needs to be considered to make a step change."
— Verena Ross [05:25]
Timeline of Key Segments
- [00:26–01:50] — Discussion of AI's role in accelerating cybersecurity risks and ESMA’s response.
- [02:14–02:53] — Financial sector preparedness for new AI-driven risks.
- [02:53–04:24] — Regulatory landscape: Market integration, supervision package, and innovation.
- [04:41–06:34] — Acceleration of reform efforts, drivers for change, and EU capital markets' strategic needs.
Episode Tone & Language
The conversation maintains a professional, informative tone, with Verena Ross offering clear, structured insights while advocating for coordinated, strategic adaptation within European financial markets. The language is precise, policy-forward, and grounded in the realities of regulatory work.