Eigen RadarAI
Archive
Analysis

Singapore keeps financial firms responsible for the AI they buy

Singapore’s central bank issued AI risk guidelines that keep financial institutions accountable for systems supplied by outside providers. Firms are expected to assess suitability, obtain assurances and consider limiting or replacing a service when risks remain unacceptable. The framework covers institution-wide risks and individual uses, with phased implementation starting on October 7, 2027 and full requirements due a year later.

Artificial Intelligence··Morning
An empty walkway beside a glass facade overlooks the three-tower Marina Bay Sands across the water.

Outsourcing AI keeps accountability with the financial firm

The Monetary Authority of Singapore, the country’s central bank and financial regulator, known as MAS, issued AI risk management guidelines on October 7. Financial institutions remain accountable for AI used in the services they deliver, including systems developed, operated or supplied by outside companies. They are expected to obtain sufficient assurance from providers and assess whether a system suits its intended use.[1], [2]

Where assurance is incomplete, firms should apply compensating controls. If the risks still exceed the institution’s risk appetite, the regulator says it should consider limiting, suspending or replacing the third-party AI service.[1]

Oversight reaches boards and individual uses

The framework covers risks at institution and use-case levels. Firms should identify AI use, maintain inventories and apply proportionate controls over the system’s life cycle, including testing, human oversight, cybersecurity and monitoring. Boards and senior management have clear oversight responsibilities. Existing governance structures can serve when they provide adequate oversight and coordination; a separate AI committee is optional.[1]

Implementation is phased across two years

The guidelines follow a November 2025 consultation. Implementation starts on October 7, 2027, with full requirements due by October 7, 2028. The authority also plans a further industry consultation in 2027 on guidance for autonomous AI agents that can access tools.[1]

References

  1. News sourceCNASingapore keeps financial firms accountable for third-party AI↩1↩2↩3↩4
  2. News sourceThe Business TimesSingapore issues AI risk guidelines for financial institutions↩
AI safety and regulationChip wars and the supply chain

More analysis from this desk

View all Brief analyses from the Artificial Intelligence desk →