MAS AI risk management guidelines

The Monetary Authority of Singapore's Guidelines on Artificial Intelligence Risk Management are the final version dated 7 October 2026. Paragraph 1.8 of the guidelines states: "These Guidelines take effect on 7 October 2027. FIs may meet the expectations set out in Sections 3 to 4 from 7 October 2027, and Section 5 and 6 of the Guidelines by 7 October 2028."

The guidelines are addressed to financial institutions. A company outside that group is not directly covered, but its financial clients may ask it to meet the same expectations in contracts.

In practice

For a financial institution, the work is to map each AI system against the sections, identify the owner, and show the controls. A builder supplying an agent to a bank should expect the bank to ask for the same evidence: a risk assessment, testing results, human oversight, and monitoring after launch.

The phased dates matter for planning. Sections 3 and 4 apply from October 2027, and Sections 5 and 6 by October 2028. The exact content of each section should be read from the guidelines.

Example

[Composite] A regional insurer planned a claims agent for 2027. Its procurement team asked the builder for the evidence it would need under the guidelines before the agent was approved, and the builder supplied the test results, the oversight design and the monitoring plan in one pack.

Common mistakes

• Treating the date as the start of work rather than the end of the phase-in.
• Assuming the guidelines do not reach a company's suppliers.
• Quoting the November 2025 consultation paper rather than the final text.