Skip to content

25 February 2025 | 2 min

FINMA Supervisory Notice 08/2024: AI use on GRC

The rapid integration of Artificial Intelligence (AI) in the financial sector presents both opportunities and challenges. With the publication of Supervisory Notice 08/2024, FINMA has outlined clear expectations for governance and risk management in relation to AI usage.

Key Points of FINMA Supervisory Notice 08/2024

FINMA emphasizes that although there is no specific AI legislation in Switzerland, existing, technology-neutral regulatory requirements also apply to AI. Financial institutions must actively analyze the impact of AI on their risk profile and adapt their governance, risk management, and control systems accordingly.

Key risks identified include operational risks such as model uncertainties, IT and cyber threats, and increased dependence on third-party providers. FINMA requires institutions to define clear responsibilities, maintain a comprehensive inventory of AI applications, conduct regular testing to ensure data quality and model stability, and implement independent reviews of critical AI systems.

The Impact of Increasing AI Usage on GRC

The growing implementation of AI is significantly transforming Governance, Risk Management, and Compliance (GRC):

  • Governance: AI adoption necessitates adjustments in corporate governance, including the clear assignment of responsibilities for AI development, implementation, and oversight.
  • Risk Management: AI can help identify and mitigate risks by analyzing large datasets and detecting patterns. However, new risks arise, such as faulty algorithms or biased data, which require continuous monitoring.
  • Compliance: AI usage must align with existing regulatory requirements, ensuring transparency in AI-driven decisions and protecting sensitive data.

How GRC Software Can Help

Modern GRC software solutions play a crucial role in addressing AI-related challenges:

  • Automation and Efficiency: AI-powered GRC tools can automate processes, increasing efficiency and accuracy in risk and compliance management.
  • Real-Time Monitoring: AI-driven GRC systems enable continuous risk and compliance monitoring, allowing companies to proactively address potential issues.
  • Integration and Scalability: GRC software integrates seamlessly into existing IT infrastructures and scales to meet the growing demands of AI implementation.

Conclusion

FINMA’s Supervisory Notice 08/2024 highlights the need for robust governance and risk management frameworks in response to AI adoption in the financial sector. As AI continues to shape GRC structures, organizations must adapt their strategies and tools. GRC software solutions provide essential support by automating processes, enabling real-time monitoring, and ensuring seamless integration into existing systems.

Related posts