FFIEC AI examination standards in 2026 focus on board oversight, complete AI model inventories, AI-specific validation, third-party vendor oversight, and GenAI controls. Here's what banks need to prepare.
The EU AI Act's high-risk AI obligations for financial services — including credit scoring and AML models — apply from August 2026. This guide covers who's in scope, compliance requirements, and how to intersect with DORA and SR 26-2.
Compliance teams at banks need practical policy artifacts. This 9-section GenAI governance policy template — acceptable use, data handling, model approval workflow, audit trail, incident response — is ready to adapt for your institution.
Model validation is the most scrutinised MRM pillar in bank examinations. This guide covers the three SR 11-7 components, independence requirements, documentation checklist, and how AI models change validation under SR 26-2.
DORA entered full enforcement in January 2025. US banks with EU operations face active examination risk in 2026. This guide covers who is in scope, the five pillars, compliance checklist, and key deadlines.
SR 11-7 is gone. On April 17, 2026, federal banking agencies replaced it with SR 26-2 — a principles-based model risk framework that eliminates annual revalidation cycles and introduces formal materiality tiering. Here is what changed and what banks must do now.
SR 26-2 supersedes SR 11-7 but carves out generative and agentic AI. Here is how U.S. bank compliance and technology leaders build governance that covers the full AI stack.
The Treasury's FS AI RMF translates NIST AI RMF into 230 control objectives for banks. Here's how to apply the four core functions — GOVERN, MAP, MEASURE, MANAGE — inside a regulated financial institution.
The AI compliance perimeter for U.S. fintech companies expanded sharply in 2026. Here is what the Treasury FS AI RMF, CFPB fair lending rules, and NYDFS cybersecurity regulation mean for your compliance program.
A practical guide to the four AI applications reshaping U.S. banking — fraud detection, credit scoring, AML/BSA, and chatbots — and the specific regulatory requirements each one triggers.
The April 2026 revised model risk guidance excludes generative AI — here is how banks should govern LLM deployments, manage hallucination risk, and build audit trails before examiners arrive.
AI is reshaping bank cybersecurity from both sides of the threat landscape. Here is what U.S. bank technology leaders need to know about AI-enabled attacks, NYDFS Part 500, and federal regulatory expectations in 2026.
