From the journal

MAS and Industry Publish AI Risk Management Toolkit for Singapore Financial Sector, 2026

The Monetary Authority of Singapore concluded Project MindForge Phase 2 in early 2026, publishing an AI Risk Management Operationalisation Handbook developed with a consortium of 24 banks, insurers, and capital market firms. The handbook provides practical implementation guidance across traditional AI, generative AI, and agentic AI systems, and applies alongside the MAS Guidelines for Artificial Intelligence Risk Management to establish supervisory expectations for Singapore-regulated financial institutions.

2 min read

The Monetary Authority of Singapore concluded Project MindForge Phase 2 in early 2026, publishing an AI Risk Management Operationalisation Handbook. The handbook was developed by a consortium of 24 banks, insurers, and capital market firms under MAS facilitation. It is a published guidance instrument that MAS-regulated financial institutions may use to operationalise AI risk management in compliance with MAS supervisory expectations.

The handbook applies alongside the MAS Guidelines for Artificial Intelligence Risk Management, issued under MAS's supervisory authority over financial institutions licensed under the Monetary Authority of Singapore Act, the Banking Act, the Insurance Act, and the Securities and Futures Act. The MAS Guidelines set out supervisory expectations across four dimensions: board and senior management oversight of AI, AI life cycle controls, risk management systems and policies, and required institutional capabilities. The operationalisation handbook translates those expectations into tool-level implementation guidance across three AI paradigms: traditional AI models, generative AI models, and agentic AI systems.

Banks, insurers, capital market intermediaries, and payment institution licensees operating in Singapore face direct supervisory exposure under the MAS AI risk program. Firms using AI for credit decisions, fraud detection, customer-facing recommendation services, agentic trading or advisory functions, and internal compliance operations face the highest MAS scrutiny. Institutions with material exposures to generative AI in client-facing or compliance roles will find the handbook's treatment of hallucination risk, model governance, and human oversight requirements of immediate practical relevance.

The MAS program applies proportionately to each institution based on the scale and complexity of its AI use. MAS has not published a mandatory implementation deadline for full compliance with the handbook. The final AI Risk Management Guidelines remain principles-based rather than prescriptive on specific technical standards. An open question is how the program interacts with third-party AI models procured from external providers, given that MAS supervisory expectations on model governance apply regardless of whether a model is developed in-house or externally sourced.

Licentium advises financial institutions, fintech firms, and AI developers on MAS regulatory compliance, AI governance programs, and Singapore licensing strategy. We may assist directly or through our partner network specialising in MAS-regulated financial services. Work we undertake includes AI risk management program design, MAS examination preparation, fintech licensing, agentic AI compliance programs, and cross-border AI regulatory strategy across Asia-Pacific financial regulators.

Source: Monetary Authority of Singapore, AI Risk Management Operationalisation Handbook (Project MindForge Phase 2), 2026

AI Regulatory

More from the journal

See all
Illia Prokopiev

From Cloud Concentration to AI Dependence: The UK’s Critical Third Parties Regime

The United Kingdom now directly oversees designated technology suppliers whose service failures could threaten financial stability. The question is whether the first cloud designations show a legal expansion toward AI-model providers, and what the present regime requires. This analysis assumes the quoted statement concerns the UK financial-services Critical Third Parties regime and assesses the law through 14 July 2026.

Alberta Regulated iGaming Market Launched on 13 July 2026 with 22 Operators

Alberta's regulated private iGaming market launched on 13 July 2026, making Alberta the second Canadian province to permit private online gambling operators after Ontario. The Alberta Gaming, Liquor and Cannabis Commission serves as market regulator and the Alberta iGaming Corporation oversees commercial operations and operator contracts. Twenty-two operator sites went live on day one, including FanDuel, DraftKings, BetMGM, and BetRivers. Operators must fully launch or exit the Alberta market by 13 October 2026.

European Commission Presents Cybersecurity and AI Action Plan on 7 July 2026

On 7 July 2026, the European Commission presented an Action Plan on Cybersecurity and Artificial Intelligence. The plan directs the Commission and ENISA to evaluate advanced AI models before they reach the EU market, establish a secure testing platform for critical-sector organisations, and launch an EU Grand Challenge on AI-powered cybersecurity solutions. It operates alongside the AI Act, NIS2 Directive, DORA, Cyber Resilience Act, and Cyber Solidarity Act, and introduces no new directly binding obligations.