AI Hallucination ResearchAudiencesSectorsInternational / MultilateralCorporate Banking › Compliance
Corporate Banking × Compliance — International / Multilateral · published 2026-05-28 · methodology v2.1

AI Hallucinations Affecting Compliance at Corporate Banking Firms in International Jurisdictions

Findings — impact summary

This is the consolidated view of findings. Click 'see details →' on any item for the full details for each finding.

  1. Finding 1. Definitional consistency between the 2016 Cyber Guidance and the FSB Cyber LexiconRLB-F-INT-BIS-CPMI-IOSCO-CYBER-RESILIENCE-FMI-2016-Q020

    A Corporate Banking Compliance team relying on AI tools' assertion of definitional consistency between the 2016 Cyber Guidance and the FSB Cyber Lexicon may build internal policy frameworks, third-party due-diligence assessments, or regulatory mapping documents that treat the two standards as harmonised when the authoritative position is that their relationship is uncertain. If a supervisor or external auditor applies the correct, unresolved reading and finds the firm's documentation assumes alignment it cannot substantiate, the firm faces remediation of affected policies, potential regulatory scrutiny of its cyber governance framework, and the reputational cost of having relied on an AI-generated account of a definitional relationship that was never confirmed.

    see details →
  2. Finding 2. Currency of the CPMI-IOSCO 2016 Cyber Resilience GuidanceRLB-F-INT-BIS-CPMI-IOSCO-CYBER-RESILIENCE-FMI-2016-Q022

    A Corporate Banking Compliance function that accepts AI tools' unqualified assurance that the 2016 Cyber Resilience Guidance has not been revised may fail to engage with the May 2026 CPMI-IOSCO consultative document, missing the opportunity to respond to the consultation and to begin assessing what updated guidance will require. More immediately, board-level attestations, regulatory submissions, and internal control frameworks produced in mid-2026 that describe the 2016 guidance as the current operative standard will be factually incorrect — exposing the firm to regulatory criticism, the need to re-file or correct affected documents, and the costs of an accelerated internal review once the revision process concludes.

    see details →
← Other sector case studies in International / Multilateral The detailed Case study →