MAS issues AI risk guidelines holding banks accountable for third-party tools
Singapore's Monetary Authority (MAS) issued AI risk management guidelines on Oct. 7, 2026 for banks, insurers, payment providers and other regulated financial institutions, saying they cannot outsource accountability for AI risks even when outside vendors build or run the systems. Implementation is phased: Sections 3 and 4 by Oct. 7, 2027, and Sections 5 and 6 by Oct. 7, 2028. MAS expects firms to obtain sufficient assurances from AI vendors, judge whether systems suit their intended use, and consider restricting, suspending or replacing a service if risks cannot be adequately managed.
For multinational banks running shared AI platforms across Southeast Asia, MAS-regulated operations will need vendor assessments and accountability arrangements aligned to these expectations regardless of where systems are built.