Image generated with AI
Banks and insurers face an increasingly complex threat landscape, with attackers making growing use of AI. DORA puts cyber resilience at the center of operational risk management, requiring organizations to detect, respond, report and test. T-Systems operates one of Europe's largest cyber defense capabilities, analysing more than a billion security events daily. We help secure AI applications before deployment and support the transition to post-quantum cryptography, while providing access to quantum computing environments for research and innovation.
DORA requires banks, insurers and other financial institutions to manage ICT risk, detect and classify incidents, report major incidents within defined timeframes, and test operational resilience regularly. This includes threat-led penetration testing for certain institutions. T-Systems supports these requirements with managed detection and response, DORA-aligned incident response processes, penetration testing services, and governance and documentation support.
Managed Detection and Response (MDR) is a 24/7 service in which T-Systems security analysts monitor endpoints, networks and cloud environments, investigate alerts and help contain threats before they spread. The service is delivered from Deutsche Telekom's Cyber Defense Center in Bonn, which analyses more than a billion security-relevant events every day across 3,000 data sources. For banks and insurers, MDR provides access to specialist expertise without the need to build a full in-house security operations team.
AI introduces new risks, including prompt injection, data poisoning, model theft and information leakage through agents interacting with business systems. T-Systems assesses AI use cases, identifies potential vulnerabilities, and helps secure models, data pipelines and integrations. We also implement monitoring and governance controls aligned with the EU AI Act and DORA requirements. This helps banks and insurers deploy AI assistants, fraud detection models and automated decision-support systems with the same governance and oversight applied to other critical applications.
Because of harvest-now-decrypt-later: attackers can record encrypted traffic today and decrypt it once quantum computers are capable. Data with a long confidentiality life, such as customer records, insurance contracts and transaction histories, is exposed already. Regulators and standard bodies are publishing post-quantum cryptography timelines. T-Systems helps you inventory cryptography, prioritize systems and migrate in a controlled programme.
Quantum as a Service (QaaS) provides secure, subscription-based cloud access to quantum computers from providers such as IBM, IQM and AQT, without the need to own or operate hardware. Combined with high-performance computing and quantum-inspired algorithms, it enables quant, actuarial and risk teams to explore use cases such as portfolio optimization, risk simulation and pricing.
AI can help detect potentially fraudulent transactions in real time, adapt to emerging fraud patterns and reduce false positives, helping to improve investigation efficiency. To support regulatory requirements, including BaFin expectations and the EU AI Act, organizations need appropriate governance, transparency and data protection measures. T-Systems helps build fraud, claims-fraud and anti-money-laundering analytics on sovereign infrastructure, with explainable AI capabilities and comprehensive audit and monitoring controls.
