MAS Guidelines on AI Risk Management, 7 October 2026: What Singapore Expects Banks and Insurers to Do About AI Inventories, AI Agents and Kill Switches by 2027 and 2028

What the Monetary Authority of Singapore issued on 7 October 2026

The Monetary Authority of Singapore (MAS) has published its final Guidelines on Artificial Intelligence Risk Management, following a consultation that opened in November 2025. The 30-page document applies to all financial institutions in Singapore and to all forms of AI, including generative AI and AI agents. It takes effect on 7 October 2027. Institutions are expected to meet the oversight and inventory expectations from that date and may phase in the life cycle controls and capability expectations until 7 October 2028. Institutions with material AI use are expected to keep an AI inventory, rate the risk of each use case and have the board set an appetite for AI risk; those whose AI is unlikely to have a material adverse impact may follow a lighter basic regime.

Why AI agents and third-party models sit at the center of the MAS guidelines

MAS rates each use case on three dimensions: impact, complexity and reliance. Reliance explicitly includes the autonomy granted to the system and how much a human is involved. For AI agents, MAS suggests the inventory record which tools and systems the agent can reach and which guardrails constrain it. From October 2028, high-risk uses are expected to have fallback plans, and where an institution has built a kill switch, its activation protocol should be tested regularly. A bank that buys its AI from a vendor stays accountable for it. This post reads the document section by section and sets it beside the US and EU approaches.