Singapore
Financial services
Singapore supervises this by institution rather than by system. The technology risk and outsourcing duties are owed by the firm whether it built the model, bought it or inherited it with a book of business, and several of the most demanding instruments are advisory in form and supervisory in practice — which is the distinction firms most often get wrong when deciding what to evidence.
§ 1 — Supervision
Who holds the power
The Monetary Authority of Singapore, as both central bank and integrated financial supervisor.
Sector regulators and national frameworks, several of them advisory in form and expected in practice.
§ 2 — What binds you
The sector instruments
These reach financial services because it is financial services — not because they reach everyone. 3 provisions.
- AI Model Risk Management §5.3Observations from a Thematic Review
The paper binds nobody. It is scoped to AI model risk management and draws its own boundary at §3.5: data governance, technology and cyber risk, and third-party risk are not covered here, and the existing notices, guidelines and information papers on those subjects apply instead. Within that scope it reaches AI as the firm itself defines AI, across whatever population the firm’s identification process catches — which makes this assessment the gateway to every control downstream of it.
- Notice FSM-N05, paragraph 9Notice on Technology Risk Management
All banks in Singapore, by paragraph 1 of Notice FSM-N05, with bank in Singapore taking its meaning from section 2(1) of the Banking Act 1970; insurers owe the equivalent duty under Notice FSM-N03. Nothing in paragraph 9 is gated on criticality, materiality or technology, and no AI carve-out exists. The gate is the definition of customer information and its referability test, applied to each place that information comes to rest.
- SAFR v1.0Safeguards for Agentic Finance at Runtime
Agentic systems that initiate actions rather than produce outputs for a person to act on — the paper’s own opening distinction. SAFR is a reference model an institution implements in its own infrastructure; it is expressly not a managed service and it is not an instrument, so it binds nobody and no supervisory consequence attaches to ignoring it. What it describes reaches any deployment where software can move money, submit a filing or change a record without a person in the path.
§ 3 — Also reaches you
What reaches you anyway
These bind financial services the way they bind everyone else in Singapore, and they are not what distinguishes this sector — but they are owed all the same, and they are usually the larger part of the work.
- IMDA Agentic AI Framework v1.5 §2.1 — Assess and bound the risks upfront
- IMDA Agentic AI Framework v1.5 §2.1.1 and §2.2.2 — Reversibility of agent’s actions
- IMDA Agentic AI Framework v1.5 §2.3.3 — Continuous testing and monitoring
- MAS Consultation Paper P017-2025 — Consultation Paper on Guidelines on Artificial Intelligence Risk Management
- Model AI Governance Framework for Agentic AI v1.5, §§2.1.2 and 2.3.1 — Bound risks through design by defining agents limits and permissions
- Model AI Governance Framework for Agentic AI v1.5, §2.3.2 — Before deploying, test agents
Certification
Assessed on the same standard of evidence
Every Council credential is examined on applied judgement against a published anchor, set out the way the obligations on this page are. The Certified Applied AI Associate, the Council’s flagship, is open to any adult today, its fee waived by a coupon code from the AI-Readiness Check, and the register lists what is open for enrolment.