The U.S. Securities and Exchange Commission has published its fiscal 2027 examination priorities, putting artificial intelligence, tokenization, private credit and cybersecurity on the agenda for oversight teams. The SEC announcement dated October 23, 2026 says the program covers more than 34,000 registrants.
The priorities do not create new legal obligations and do not limit what examiners may review. They instead show where the Division of Examinations expects heightened compliance and investor-protection risks in the coming year.
What SEC exam teams will test
The 20-page examination priorities document emphasizes advisers’ fiduciary duties, conflicts of interest, fees, disclosures and compliance programs. For registered funds and ETFs, examiners will look at portfolio management, liquidity, valuation and whether disclosures match actual practices.
Private funds and private credit are another focus. The SEC says reviews may address risk disclosures, fees and expenses, valuation practices and controls around material nonpublic information. That focus arrives as private-market products become more visible to a broader set of investors.
AI, tokenization and market infrastructure
The SEC document uses the term “super intelligence” for rapidly evolving AI systems. Examiners plan to assess whether firms using such tools still meet technology-neutral duties, including supervision, recordkeeping, disclosure and the management of conflicts. The agency also says its staff may use advanced tools internally, while human examiners retain judgment.
Tokenization and Treasury clearing appear alongside other market-infrastructure risks. That links the new priorities to the broader policy questions covered in Fusion Market News reporting on the OCC’s stablecoin rule under the GENIUS Act and the Coinbase Ireland safeguarding fine.
What regulated firms should do now
Firms can use the priorities as a risk-based checklist rather than treating them as a new rulebook. AI inventories should identify where models affect advice, trading, communications or controls; private-market reviews should test valuation, liquidity and fee disclosures; and cybersecurity programs should confirm that incident response and customer-data safeguards work in practice.
The SEC also stresses that the published list is not exhaustive. Boards and compliance teams should keep their existing statutory duties at the center of preparation while documenting how new technology changes their risk profile. A similar emphasis on operational controls appears in the Customers Bancorp deposits and AI strategy coverage.
Image credit: Steve A Johnson / Unsplash.



