OSFI statement on the Financial Stability Board’s publication of Sound Practices for Responsible Adoption of Artificial Intelligence
OSFI statement on the Financial Stability Board’s publication of Sound Practices for Responsible Adoption of Artificial Intelligence
OSFI endorsed the Financial Stability Board’s 12 Sound Practices for Responsible Adoption of Artificial Intelligence on October 15, 2026. The statement does not create a new binding rule or implementation deadline, but it signals that OSFI expects federally regulated financial institutions to address AI through existing governance, technology, operational, third-party, model, data and cyber-risk frameworks, with board and senior-management accountability and controls proportionate to each use case.
Key dates
- 2026-10-15
- OSFI published its statement endorsing the FSB Sound Practices for Responsible Adoption of Artificial Intelligence; the FSB also published the final Sound Practices on this date.
Suggested considerations
- Compliance teams may wish to map the 12 FSB practices against existing controls under OSFI’s Corporate Governance Guideline, Integrity and Security Guideline, Guideline B-10, Guideline B-13, Guideline E-21 and Guideline E-23.
- Firms should consider maintaining an enterprise-wide inventory of AI use cases, including internally developed systems, embedded vendor functionality and generative or agentic AI, with documented owners, intended purposes, materiality assessments and lifecycle status.
- Boards and senior management may wish to review whether the institution’s business strategy, risk appetite and governance framework clearly address AI adoption, accountability, escalation and human oversight.
- Firms should consider assessing AI use cases for operational, technology, cyber, third-party, model, data, privacy, conduct and governance risks, with controls proportionate to the materiality and risk of each use case.
- Compliance and risk functions may wish to review AI development and deployment documentation, validation, monitoring, change management, testing, incident escalation, explainability and retirement processes, including for systems supplied by third parties.
- Institutions should consider evaluating whether existing B-10 outsourcing and third-party risk controls address vendor model changes, data access, subcontracting, concentration risk, resilience, audit rights and exit arrangements for AI-enabled services.
- Internal audit or an equivalent independent assurance function may wish to assess whether AI governance and lifecycle controls operate effectively and whether management reporting to the board is sufficiently complete.
- Firms may wish to monitor subsequent OSFI technology risk bulletins, supervisory communications and future revisions to the FSB practices, since OSFI stated that it will continue monitoring how AI changes the risk environment and institutional operations.
What changed
OSFI formally endorsed the FSB Sound Practices and identified them as complementary to existing OSFI expectations. The FSB practices cover organization-wide AI governance and management across the AI lifecycle, including strategic direction, accountability, risk management, human oversight, data governance, controls, adaptability and coordination. The publication is non-binding guidance rather than a new OSFI rule, capital requirement, reporting obligation or prescribed compliance deadline.
Compliance impact
The immediate legal and prudential impact is moderate because the statement introduces no standalone binding obligation or deadline. Its supervisory significance is nevertheless material: weaknesses in AI governance may be assessed through existing OSFI frameworks, and unmanaged AI risks could contribute to operational, technology, cyber, third-party, model, data, governance, resilience, integrity or security consequences.
References
- [1] fsb.org/2026/10/fsb-finalises-sound-practices-for-the-res... third-party
- [2] fsb.org/?content_type third-party
- [3] fsb.org/2026/06/fsb-consults-on-sound-practices-for-the-r... third-party
- [4] fsb.org/2026/06/sound-practices-for-responsible-adoption-... third-party
- [5] fsb.org/2026/07/opening-remarks-on-sound-practices-for-ar... third-party
- [6] fsb.org/2026/08/public-responses-to-consultation-on-sound... third-party
- [7] fsb.org/uploads/P100626.pdf third-party
- [8] cms.law/en/bel/legal-updates/fsb-sound-practices-for-resp... third-party
AI-generated analysis. May contain errors or omissions — verify with the original OSFI source before acting. Full disclaimer.