The RiskTech Journal
The RiskTech Journal is your premier source for insights on cutting-edge risk management technologies. We deliver expert analysis, industry trends, and practical solutions to help professionals stay ahead in an ever-changing risk landscape. Join us to explore the innovations shaping the future of risk management.
Regulators Have Drawn the Line Between Controlling an AI Agent and Being Accountable for One
The Financial Stability Board spent four months deciding that AI agents are not employees. Its June consultation on responsible AI adoption had leaned on the familiar machinery of people management: three lines of defense, role definitions, agent certification with a permitted scope on file. The final report, published October 15, keeps that machinery but drops the premise. Financial institutions are now told to recognize that AI agents do not reason like humans and may interpret pre-defined goals in unexpected ways. The phrase "synthetic employee" is gone.
That is the quiet change. The loud one is where the FSB puts the boundary of technical control. For the first time, an international standard setter has named the control plane, defined it, and then stated that it does not settle the question that matters most to a board.
IRM Market Brief: August 25 to 31, 2026
ServiceNow spent last week patching three of the worst flaws a software product can have. All three sat in its AI Platform, the same foundation that runs the company’s AI governance tools. The patches went out fast and no exploitation has been reported. The harder question the episode raises will outlast the patches: can a control plane be trusted when the platform underneath it cannot?