Suitability is the requirement that advice matches a client’s goals, risk appetite, and financial circumstances. In regulated environments, it is not enough for a recommendation to be plausible or profitable; it must be appropriate for the person receiving it. That makes suitability a control concept as much as a compliance concept.
In cyber security and AI-enabled advisory systems, suitability matters because attackers can manipulate the inputs that shape decisions. Poisoned data, prompt injection, stale market summaries, or biased model outputs can all produce advice that looks confident but does not fit the client profile. Defenders reduce that risk with approved data sources, human oversight, client-profile validation, and recordkeeping that shows how a recommendation was formed. In practice, suitability is the check that stops automation from turning incorrect or misclassified information into an unsafe decision.