How Banking Is Adapting to AI Governance and Risk (AI Safety and Governance in Banking Benchmark)

BCG's benchmark of 26 global and domestic systemically important banks (published 13 November 2026) assesses how prepared institutions are to govern AI as it becomes more autonomous. Its headline finding: 'Banks in the top third for more mature risk management were 2.5 times as likely to be advanced AI adopters as those in the bottom third.' It shows operational governance maturity is uneven — '73% of banks permit agents in production for select use cases,' but 'at 88% of banks, agents make up 10% or less of the AI portfolio, and only 8% of institutions have a comprehensive, standardized monitoring and control framework that explicitly covers agents.' It also finds '77% of institutions have a dedicated AI policy, yet fewer than half have a centralized, tool-based AI inventory, and none report a comprehensive human-oversight framework consistently implemented across AI systems.'

For bank CEOs and CROs: governance maturity is now the differentiator for safely scaling AI, and agent-specific monitoring/control is the single biggest gap as agentic AI enters production.

Benchmark your institution's agentic-AI governance against the four priorities: preapproved patterns, continuous testing/monitoring, third-party oversight, and citizen-development safeguards.