The CSBS Artificial Intelligence Supervisory Framework
The CSBS Artificial Intelligence Supervisory Framework is a discretionary tool for state examiners to identify and understand AI at financial institutions, assess associated risks, and determine when a deeper review may be appropriate using existing supervisory resources.
It is designed to consider each institution’s size, complexity, risk profile, and use of AI. The framework is based on leading AI risk management resources, including the National Institute of Standards and Technology’s AI Risk Management Framework, the Cyber Risk Institute’s Financial Services AI Risk Management Framework, and the U.S. Department of the Treasury’s AI Lexicon.
Financial institutions can use the framework to assess their own AI programs, establish sound AI governance and risk management, and prepare for examinations.
Each state financial regulatory agency will determine the extent to which this framework is incorporated into their supervisory programs. The framework was approved by the CSBS State Supervisory Processes Committee (SSPC) and the CSBS NonDepository Supervisory Committee (NDSC) in August 2026.
- Core Examiner Guide
Provides the core examination approach for identifying and understanding AI use, including initial scoping questions, a document request list, and procedures for governance and oversight, AI inventory and use cases, and generative AI and emerging use.
- Examiner Work Program
Examiner Work Program (link to download)
Provides additional detail and guidance for applying the Core Examiner Guide.
- Nonbank AI Supplements
Provides additional guidance for reviewing third-party and vendor risk, model risk, and consumer protection at nonbank financial services companies.
- AI Use Case Risk Tiering Worksheet
AI Use Case Risk Tiering Worksheet (link to download)
An optional industry tool to support a risk-based assessment of individual AI use cases and to help examiners determine where additional review may be appropriate.
- The Source Support Document
Identifies the supervisory and risk management materials that were used in the development of the framework.