The RiskTech Journal
The RiskTech Journal is your premier source for insights on cutting-edge risk management technologies. We deliver expert analysis, industry trends, and practical solutions to help professionals stay ahead in an ever-changing risk landscape. Join us to explore the innovations shaping the future of risk management.
Regulators Have Drawn the Line Between Controlling an AI Agent and Being Accountable for One
The Financial Stability Board spent four months deciding that AI agents are not employees. Its June consultation on responsible AI adoption had leaned on the familiar machinery of people management: three lines of defense, role definitions, agent certification with a permitted scope on file. The final report, published October 15, keeps that machinery but drops the premise. Financial institutions are now told to recognize that AI agents do not reason like humans and may interpret pre-defined goals in unexpected ways. The phrase "synthetic employee" is gone.
That is the quiet change. The loud one is where the FSB puts the boundary of technical control. For the first time, an international standard setter has named the control plane, defined it, and then stated that it does not settle the question that matters most to a board.
Technology-Led Response: The Blueprint Alliance
On September 22, at its Oktane conference in Las Vegas, Okta announced the Blueprint Alliance, a coalition of twelve technology companies with an open reference architecture for securing AI agents. AWS, CrowdStrike, Databricks, Docker, Google Cloud, Lovable, Proofpoint, Salesforce, ServiceNow, Wiz, and Zscaler are the other founding members. The release leans on Gartner's projection that the average Fortune 500 enterprise will be running more than 150,000 agents by 2028, and on its finding that only 13% of organizations think they have the right agent governance in place.