Reference
Regulatory Reference.
Structured summaries of the rules that govern AI systems in regulated enterprises. Each entry states what the rule is, who it binds, what it requires, and what a reviewer expects to see.
These are reference pages, not commentary. They are reviewed and dated, and every entry links to the primary source.
Model risk management
- SR 26-2: Revised Guidance on Model Risk Management
What SR 26-2 requires, who it applies to, and what examiners expect to see. Issued April 2026 by the Federal Reserve, OCC and FDIC, replacing SR 11-7.
Last reviewed August 14, 2026
- SR 11-7 to SR 26-2: What Changed
The differences between SR 11-7 and SR 26-2, what carried forward unchanged, and what model risk programs need to update.
Last reviewed August 14, 2026
Cybersecurity
- 23 NYCRR 500.13: Asset Management and Data Retention
What NYDFS Section 500.13 requires for asset inventory and secure disposal of nonpublic information, who it binds, and what examiners expect to see.
Last reviewed August 14, 2026
Securities
- FINRA Regulatory Notice 24-09: Generative AI and Large Language Models
What FINRA Regulatory Notice 24-09 says about generative AI, which existing obligations attach, and what examiners expect to see.
Last reviewed August 14, 2026
This reference summarises publicly available regulatory guidance and is provided for general information. It is not legal advice. Obligations depend on an institution's charter, size, activities, and supervisory relationship. Verify against the primary sources cited on each page and consult counsel before relying on any summary here.