Framework library · United Arab Emirates
DFSA AI Expectations
DFSA Regulatory Expectations on AI Risk Management in the DIFC. Published by Dubai Financial Services Authority (DFSA), version Dear SEO letter, 4 June 2026. Kapālins maps it to 4 controls. 1 of 4 controls are proved by a live signal from the platform, and 3 by the assessment.
Controls mapped
DFSA-CYBERCyber risk arising from the use of AILive signal
DFSA-GOVGovernance and accountabilityAssessment
DFSA-RISKRisk management and operational riskAssessment
DFSA-TPRMThird-party arrangements and outsourcingAssessment
Live signal: a signal from the gateway, probes or device sensor proves it continuously. Assessment: it is evidenced by answers to the assessment. Both are exported in the regulator evidence pack.
History
How DFSA AI Expectations got here.
- Guidance
DFSA published its SEO letter on regulatory expectations on artificial intelligence risk management in the DIFC. DFSA