Meeting the European Central Bank’s AI Cybersecurity Mandate

**Executive summary:** The ECB has directed significant banks to deliver board‑endorsed AI-focused cyber action plans by 31 October 2026, citing AI-driven acceleration of cyber threats and extending related DORA timelines; this document outlines required control areas (vulnerability/patch management, monitoring/detection, third‑party ICT risk, legacy modernization, crisis response, and management oversight) and positions Fortinet’s AI-enabled security platform as a solution to help banks comply.