Revised Fed, OCC and FDIC guidance recognizes that a model may need to go into use before validation is finished, with limits. Someone has to own that call.
The new interagency model risk guidance leaves generative and agentic AI out of scope. Banks still own the risk.
FDA's draft guidance on AI in drug development turns model credibility into a decision someone has to own.
The NAIC model bulletin asks insurers to govern AI systems that support regulated decisions. Governance that waits is still a wait.
ABA Formal Opinion 512 put generative AI under the rules lawyers already follow. The slow part is deciding who answers.
CMMC Phase 1 makes a current status in SPRS a condition of award. The last step is a person.
OSFI's Guideline E-23 ties approval authority to model risk. Use it to stop sending every change to the top.
Microsoft's CEO says companies pay for intelligence once in money and again in know-how. Here is how regulated firms keep the second payment in-house.
Enterprise AI
+2
US bank regulators set one lifecycle for third-party risk. Where a tool runs and where the data goes shape how long that lifecycle takes.
Third-Party Risk