Governing Generative AI Across Financial Institutions: An SR 26-2-Compatible Framework for Generative AI Risk Control

• URL: http://arxiv.org/abs/2607.04103v2
• Date: Thu, 09 Jul 2026 13:59:41 GMT
• Title: Governing Generative AI Across Financial Institutions: An SR 26-2-Compatible Framework for Generative AI Risk Control
• Abstract summary: Generative AI Control Framework (GAICF) is an SR 26-2-compatible framework for generative AI-enabled financial governance.<n>This paper proposes the Generative AI Control Framework (GAICF), an SR 26-2-compatible framework for generative AI-enabled financial governance.
• Score: 1.3253687170778101
• License: http://creativecommons.org/licenses/by/4.0/
• Abstract: The release of SR 26-2 marks a significant modernization of U.S. model risk management by replacing SR 11-7 with a more risk-based and materiality-sensitive supervisory framework. However, generative and agentic AI are excluded, creating an important governance challenge for banking organizations and other financial institutions. Although generative AI may not directly estimate credit risk or make underwriting decisions, its outputs can materially affect the surrounding control environment through monitoring interpretation, policy analysis, or adverse-action language drafting. These uses may influence how regulated financial decisions are explained, challenged, documented, and governed. This paper proposes the Generative AI Control Framework (GAICF), an SR 26-2-compatible governance framework for generative AI-enabled financial workflows. The framework translates core model risk management principles into a layered control structure for generative AI applications that operate outside the formal model boundary but remain embedded within regulated banking processes. GAICF provides a practical approach for financial institutions seeking to align emerging generative AI governance practices with the risk-based supervisory expectations reflected in SR 26-2.

Related papers

• An approach to systemic risks of AI through the lens of emergence, collective action problems, and externalities [41.99844472131922]
  There is no generally accepted definition of systemic risks in general and for AI in particular.<n>The application of the systemic risk approach to human rights or fundamental rights, like in the EU AI Act, is relatively new.<n>We argue that some concepts so far have not sufficiently take complexity and emergence into account.
  arXiv  Detail & Related papers  (2026-07-20T17:12:04Z)
• Governing frontier general-purpose AI in the public sector: adaptive risk management and policy capacity under uncertainty through 2030 [0.0]
  Article argues that public governance for frontier AI should be based on adaptive risk management, scenario-aware regulation, and sociotechnical transformation.<n>It examines how AI adoption in government depends on organizational foresight, public-sector institutional dynamics, and data collaboration capacity.<n>It concludes that effective AI governance requires stronger policy capacity, clearer allocation of responsibility, and governance mechanisms that remain robust across divergent technological futures.
  arXiv  Detail & Related papers  (2026-03-16T19:03:26Z)
• Agentic AI, Retrieval-Augmented Generation, and the Institutional Turn: Legal Architectures and Financial Governance in the Age of Distributional AGI [0.0]
  This paper examines the intersection of agentic AI, Retrieval-Augmented Generation (RAG), and their implications for legal accountability and financial market integrity.<n>We argue that alignment must be reconceptualized as a mechanism design problem involving runtime governance graphs, sanction functions, and observable behavioral constraints rather than calibrated constitutional values.
  arXiv  Detail & Related papers  (2026-02-20T11:58:43Z)
• Mapping AI Risk Mitigations: Evidence Scan and Preliminary AI Risk Mitigation Taxonomy [35.22340964134219]
  The landscape of AI risk mitigation frameworks is fragmented, uses inconsistent terminology, and has gaps in coverage.<n>This paper introduces a preliminary AI Risk Mitigation Taxonomy to organize AI risk mitigations and provide a common frame of reference.<n>The taxonomy was developed through a rapid evidence scan of 13 AI risk mitigation frameworks published between 2023-2025, which were extracted into a living database of 831 AI risk mitigations.
  arXiv  Detail & Related papers  (2025-12-12T03:26:29Z)
• International AI Safety Report 2025: Second Key Update: Technical Safeguards and Risk Management [115.92752850425272]
  Second update to the 2025 International AI Safety Report assesses new developments in general-purpose AI risk management over the past year.<n> examines how researchers, public institutions, and AI developers are approaching risk management for general-purpose AI.
  arXiv  Detail & Related papers  (2025-11-25T03:12:56Z)
• The 2025 OpenAI Preparedness Framework does not guarantee any AI risk mitigation practices: a proof-of-concept for affordance analyses of AI safety policies [35.43144920451646]
  We analyse the OpenAI 'Preparedness Framework Version 2' (April 2025) using the Mechanisms & Conditions model of affordances and the MIT AI Risk Repository.<n>We find that this safety policy requests evaluation of a small minority of AI risks, encourages deployment of systems with 'Medium' capabilities for unintentionally enabling'severe harm'<n>These findings suggest that effective mitigation of AI risks requires more robust governance interventions beyond current industry self-regulation.
  arXiv  Detail & Related papers  (2025-09-29T07:42:10Z)
• Embodied AI: Emerging Risks and Opportunities for Policy Action [46.48780452120922]
  Embodied AI (EAI) systems can exist in, learn from, reason about, and act in the physical world.<n>EAI systems pose significant risks, including physical harm from malicious use, mass surveillance, as well as economic and societal disruption.
  arXiv  Detail & Related papers  (2025-08-28T17:59:07Z)
• Artificial Intelligence in Government: Why People Feel They Lose Control [44.99833362998488]
  The use of Artificial Intelligence in public administration is expanding rapidly.<n>While AI promises greater efficiency and responsiveness, its integration into government functions raises concerns about fairness, transparency, and accountability.<n>This article applies principal-agent theory to AI adoption as a special case of delegation.
  arXiv  Detail & Related papers  (2025-05-02T07:46:41Z)
• Generative AI Enhanced Financial Risk Management Information Retrieval [0.0]
  RiskData is a dataset curated for finetuning embedding models in risk management.<n>RiskEmbed is a finetuned embedding model designed to improve retrieval accuracy in financial question-answering systems.
  arXiv  Detail & Related papers  (2025-04-04T20:42:38Z)
• Reinsuring AI: Energy, Agriculture, Finance & Medicine as Precedents for Scalable Governance of Frontier Artificial Intelligence [0.0]
  This paper proposes a novel framework for governing such high-stakes models through a three-tiered insurance architecture.<n>It shows how the federal government can stabilize private AI insurance markets without resorting to brittle regulation or predictive licensing regimes.
  arXiv  Detail & Related papers  (2025-04-02T21:02:19Z)
• Media and responsible AI governance: a game-theoretic and LLM analysis [61.132523071109354]
  This paper investigates the interplay between AI developers, regulators, users, and the media in fostering trustworthy AI systems.<n>Using evolutionary game theory and large language models (LLMs), we model the strategic interactions among these actors under different regulatory regimes.
  arXiv  Detail & Related papers  (2025-03-12T21:39:38Z)
• Decentralized Governance of Autonomous AI Agents [0.0]
  ETHOS is a decentralized governance (DeGov) model leveraging Web3 technologies, including blockchain, smart contracts, and decentralized autonomous organizations (DAOs)<n>It establishes a global registry for AI agents, enabling dynamic risk classification, proportional oversight, and automated compliance monitoring.<n>By integrating philosophical principles of rationality, ethical grounding, and goal alignment, ETHOS aims to create a robust research agenda for promoting trust, transparency, and participatory governance.
  arXiv  Detail & Related papers  (2024-12-22T18:01:49Z)
• The risks of risk-based AI regulation: taking liability seriously [46.90451304069951]
  The development and regulation of AI seems to have reached a critical stage. Some experts are calling for a moratorium on the training of AI systems more powerful than GPT-4. This paper analyses the most advanced legal proposal, the European Union's AI Act.
  arXiv  Detail & Related papers  (2023-11-03T12:51:37Z)

This list is automatically generated from the titles and abstracts of the papers in this site.

This site does not guarantee the quality of this site (including all information) and is not responsible for any consequences.