SEC’s 2027 Exam Priorities Highlight AI, Cybersecurity, and Resilience
The SEC’s Division of Examinations spotlights AI and cybersecurity in 2027 exam priorities.
Why it matters: The SEC is intensifying oversight on AI and cybersecurity for financial firms, urging legal teams to prepare for stricter compliance demands.
- SEC’s Fiscal Year 2027 priorities emphasize artificial intelligence, cybersecurity risks, and operational resilience—systems’ recovery post-disruptions.
- Division of Examinations oversees more than 34,000 firms, including investment advisers and broker-dealers in the U.S.
- In February 2025, SEC launched Cyber and Emerging Technologies Unit (CETU) to combat cyber misconduct and protect retail investors.
- SEC officials stress exam focus must evolve rapidly to match fast-changing technology and market risks, per October 2026 announcement.
On October 23, 2026, the SEC Division of Examinations released its Fiscal Year 2027 review focus areas, highlighting artificial intelligence, cybersecurity, and operational resilience—the ability of financial systems to absorb shocks and restore services swiftly.
This renewed focus aims to protect investors and market stability by monitoring how emerging technologies impact compliance and fraud risks. The Division regulates over 34,000 entities including investment advisers, broker-dealers, and self-regulatory organizations across U.S. financial markets.
To support this mandate, the SEC created the Cyber and Emerging Technologies Unit (CETU) in February 2025. CETU specifically targets cyber misconduct and fraud, placing retail investor protection at the forefront amid growing tech adoption.
Paul S. Atkins, former SEC Chairman, commented on the significance of evolving exam priorities: "These examinations offer a critical window into emerging market risks and the shifting dynamics driven by technology," highlighting the need for ongoing adaptation by regulators and firms alike.
Keith A. Cassidy, Director of the SEC Division of Examinations, said in the October release that the exam program must "adapt continuously to the rapid pace of change in markets and technology" to remain effective.
For legal counsel advising financial institutions and AI technology providers, this means anticipating heightened scrutiny on AI governance practices and cybersecurity compliance frameworks. Aligning compliance strategies with the SEC’s outlined priorities can help navigate evolving regulatory expectations.
By the numbers:
- 34,000+ entities regulated by SEC Division of Examinations
- February 2025 — Launch of SEC Cyber and Emerging Technologies Unit (CETU)
- October 23, 2026 — Release date of SEC Fiscal Year 2027 Examination Priorities