With the acceleration of the digital transformation of the financial industry, API has become an important bridge for exchanging data and services between systems. However, this has also brought about information security risks such as data leakage and service interruption. Therefore, establishing a sound API security governance mechanism is crucial to ensuring the security and trust of the organization. In the agenda, we will share the application scenarios of APIs in financial institutions, the OWASP Top 10 common threat indicators, cybersecurity cases that have occurred at home and abroad, regulatory requirements for APIs in financial institutions, and the planning and design of related response management mechanisms. It is expected that the audience will receive specific and actionable API security protection advice, and understand how to effectively manage and govern APIs, reduce security risks, and ensure business continuity and customer trust.