Sources:
Vice Chair for Supervision Bowman, "Modernizing the Regulatory and Supervisory Landscape," Oct 6, 2026 (speaker's views, not Board policy): https://t.co/ddtlgk0vXt
Fed Vice Chair for Supervision Bowman said exams had drifted to "process over substance." Her outline: focus on material financial risk, CAMELS revisions, five supervisory regions along state lines. For banks, prep shifts from checklists toward evidence. #BankSupervision
AI governance that stops at the model inventory misses where the exposure lives: the data, documents and policies every agent draws on.
No agent is safer than the data it reads.
From the white paper Ashwin Nayak and I wrote at @auditrol. Links below.
#AIGovernance
Most AI governance programs govern the layer you can see. The risk sits one layer down.
Example: a confidential attribute reaching an LLM through an unclassified document. Tools above the line can't detect it.
#AIGovernance#DataGovernance
Most AI governance programs govern the layer you can see. The risk sits one layer down.
Example: a confidential attribute reaching an LLM through an unclassified document. Tools above the line can't detect it.
#AIGovernance#DataGovernance
BREAKING: The total volume of payments processed on crypto cards has reached a record $12.5 billion, up +140% year-to-date.
This also marks +247% growth compared to levels seen in October 2025.
Continued adoption of stablecoins as a payment rail and the push toward cross-border transaction efficiency are behind the surge in volume.
Furthermore, QR-code based payments for crypto cards are seeing robust growth.
This has fueled +55% quarter-over-quarter growth in activated cards on Jupiter Spend, one of the largest onchain card providers, particularly due to demand for QR payments.
Crypto cards are the next phase of crypto adoption.
Crypto card payment volume hit a record $12.5B, up 140% YTD, per @KobeissiLetter. In the CSBS survey, close to 60% of community bankers rated stablecoin deposit erosion a major or moderate impact. 47% flagged lost interchange.
The payments wave is here.
#FutureOfPayments
Sources:
MAS release (Oct 7): https://t.co/E6eyyTaPCe
MAS Guidelines on AI Risk Management: https://t.co/04TId2ajxW
Auditrol Institute (Chris Nobili), unauthorized agents caught live: https://t.co/osvEbBm2pi
MAS finalized AI risk management guidelines for financial institutions (Oct 7): keep AI inventories, rate risk materiality by use case, control the full life cycle. Firms stay accountable for third-party AI. Effective Oct 7, 2027.
Accountable means provable.
#AIGovernance
CSBS community bank survey (Oct 6): 53% of 330 bankers are piloting AI or using it in limited functions, and 8.8% run it across multiple functions or core ops. The question counted vendor-provided AI.
If a vendor ships the AI, the bank still owns the risk.
#AIGovernance
Your board asks: "How tight are we on our AI controls?"
Most orgs can't say. @ChrisNobili says "they have the policies, just no way to mobilize them. That's monitoring risk, not managing it."
📝 Read the blog: https://t.co/H74SAgG0fO
#AIGovernance
When an operational loss happens, can your bank say whether AI was involved, which model, agent, or vendor tool, who owned it, and which control should have caught it?
Basel is reviewing op risk loss categories for cyber and AI. Start tagging now.
#AIGovernance#OperationalRisk
FSB said its final Sound Practices for Responsible Adoption of AI is due in October. The June draft: 12 practices on governance, lifecycle risk, and cyber, ICT and third-party AI risk. Not a standard, but boards are urged to use it.
Start with the inventory.
#AIGovernance
NIST's NCCoE published its comment summary on AI agent identity and authorization (600+ commenters). First use case: identifying, authenticating, and authorizing agents in software development. Webinar Oct 28.
An agent without an identity has no owner.
#AgenticAI