Australia\u2019s financial regulator has warned financial firms that AI agent governance and assurance practices are poorly governed. The warning comes as banks and superannuation trustees expand AI in internal and customer-facing operations.
\nThe Australian Prudential Regulation Authority said it conducted a targeted review of selected large regulated entities in late 2025 to assess AI adoption and related prudential risks. It found that AI was being used in all entities reviewed, but maturity varied in risk management and operational resilience. APRA said boards showed strong interest in AI for productivity and customer experience. However, it found that many were still building management of AI risks.
\nThe regulator also raised concerns about reliance on vendor presentations and summaries. It said boards were not always giving enough scrutiny to risks like unpredictable model behaviour and the effect of AI failures on critical operations.
\nAPRA said boards should develop a better understanding of AI in order to set strategy and oversight coherently. It said AI strategy should align with an institution\u2019s risk appetite and include monitoring and defined procedures that should be taken in the event of errors.
\nAPRA noted regulated entities were trialling or introducing AI in software engineering, claims triage, and loan application processing. Other use cases cited included fraud and scam disruption and customer interaction.
\nSome entities were treating AI risk in the same terms as that of other technologies, but that approach doesn\u2019t account for models\u2019 behaviour and bias.
\nIt identified gaps in model behaviour monitoring, change management, and decommissioning, and stated a need for inventories of AI tools and named-person ownership of AI instances. It also pointed out the requirement for human involvement in high-risk decisions.
\nCybersecurity was another area of concern. APRA said AI adoption was changing the threat environment by adding additional attack pathways such as prompt injection and insecure integrations.
\nIdentity and access management practices had not adjusted in some instances to non-human elements such as AI agents. The volume of AI-assisted software development was placing pressure on change and release controls.
\nAPRA said entities should apply controls on agentic and autonomous workflows which included privileged access management, configuration, and patching. It also called for security testing of AI-generated code.
\nSome institutions had become dependent on a single provider for many of their AI instances, ARPA noted, and only a few had been able to show an exit plan or substitution strategy for AI suppliers.
\nAPRA said AI can be present in upstream dependencies, which entities may not be aware of.
\nIdentity and access
\nThe focus on identity and permission controls is also reflected in new standards work by the FIDO Alliance. The group has formed an Agentic Authentication Technical Working Group and is developing specifications for agent-initiated commerce.
\nFIDO said some existing authentication and authorisation models were designed for human interaction, not delegated actions performed by software. It said service providers need ways to verify who or what authorises actions and under what conditions.
\nVendors have presented their solutions to FIDO for review, including Google\u2019s Agent Payments Protocol and Mastercard\u2019s Verifiable Intent framework. The Centre for Internet Security, a non-profit funded largely by the Department for Homeland Security, has published AI security companion guides that map CIS Controls v8.1 to large language models, AI agents, and Model Context Protocol environments.
\nIts LLM guide covers prompt and sensitive-data issues, and an MCP guide focuses on secure access by software tools, non-human identities, and network interactions.
\n(Photo by julien Tromeur)
\nSee also: Google warns malicious web pages are poisoning AI agents
\nWant to learn more about AI and big data from industry leaders? Check out AI & Big Data Expo taking place in Amsterdam, California, and London. The comprehensive event is part of TechEx and is co-located with other leading technology events including the Cyber Security & Cloud Expo. Click here for more information.
\nAI News is powered by TechForge Media. Explore other upcoming enterprise technology events and webinars here.
\nThe post AI agent governance takes focus as regulators flag control gaps appeared first on AI News.<\/p>\n","protected":false},"excerpt":{"rendered":"
Australia\u2019s financial regulator has warned financial firms that AI agent governance and assurance practices are poorly governed. The warning comes as banks and superannuation trustees expand AI in internal and customer-facing operations. The Australian Prudential Regulation Authority said it conducted a targeted review of selected large regulated entities in late 2025 to assess AI adoption [\u2026]<\/p>\n
The post AI agent governance takes focus as regulators flag control gaps<\/a> appeared first on AI News<\/a>.<\/p>\n<\/div>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"site-container-style":"default","site-container-layout":"default","site-sidebar-layout":"default","disable-article-header":"default","disable-site-header":"default","disable-site-footer":"default","disable-content-area-spacing":"default","footnotes":""},"categories":[4,1,1086,649,70,72],"tags":[3],"class_list":["post-2809","post","type-post","status-publish","format-standard","hentry","category-ai","category-ai-and-ml","category-ai-regulation","category-cybersecurity-ai","category-finance-ai","category-governance-regulation-policy","tag-ai"],"yoast_head":"\n