The FSB published a consultation report, Sound Practices for Responsible Adoption of Artificial Intelligence, in June. Consultation closed in July, and the final report is expected in October.
The FSB says that this isn't an international standard and isn't meant to be prescriptive. The report includes case studies from banks and insurers about governance challenges they ran into and the controls they put in place.
Practices 1 to 4: organisation-wide governance. The board and senior management setting strategic direction and providing oversight. Governance and accountability frameworks. Bringing AI risks into existing risk management, and "organisational adaptability" (the capacity to keep learning as the technology changes).
Practices 5 to 10: the AI lifecycle. Materiality and risk assessment, model selection, data governance, explainability and transparency, performance management, and human oversight. These apply directly to use cases.
Practices 11 and 12: tech and 3rd-party risk. AI-related cyber and ICT risk, and third party AI risk. Includes supply chain concentration and business continuity.
The full text, along with public responses to the consultation, is available here: https://www.fsb.org/2026/06/sound-practices-for-responsible-adoption-of-artificial-intelligence-ai-consultation-report/
Disclaimer: The info in this article is not legal advice. It may not be relevant to your circumstances. It was written for specific contexts within banks and insurers, may not apply to other contexts, and may not be relevant to other types of organisations.