APRA's findings indicate a fundamental disconnect between the deployment of AI systems and the capability of existing governance structures to manage associated risks effectively. The regulator observed that many financial institutions lack the necessary technical literacy at the board level to challenge management decisions on AI-related matters. Additionally, there is an over-reliance on vendor assurances without independent verification, raising concerns about the robustness of risk management practices.
Therese McCarthy Hockey, an APRA member, emphasized the urgency of addressing these gaps, stating that while AI adoption is accelerating, the systems and processes required to govern its use safely are not keeping pace. She highlighted the need for financial institutions to enhance their ability to identify and mitigate vulnerabilities promptly, especially in an environment where AI can amplify existing risks.
APRA's communication serves as a call to action for financial institutions to reassess and strengthen their AI governance frameworks. This includes developing comprehensive risk management strategies, improving board-level understanding of AI technologies, and establishing independent verification processes to ensure the safe and effective use of AI within the financial sector.
Please Note: If this information affects you or is relevant to your circumstances, seek advice from a licensed professional.
