CeFPro Connect

Article
AI Cannot Fix a Broken Risk Assessment
Generative and agentic AI could transform risk and control self-assessments from periodic compliance exercises into dynamic risk management tools. But financial institutions must first improve processes, controls and data, with risk leaders warning that automating a weak framework will simply make its weaknesses operate faster.
Sep 21, 2026
Center for Financial Professionals
Center for Financial Professionals ,
Tags: AI and Technology (including Fintech)
AI Cannot Fix a Broken Risk Assessment
The views and opinions expressed in this content are those of the thought leader as an individual and are not attributed to CeFPro or any other organization



  • AI can enhance RCSAs but cannot compensate for weak processes, controls or data
  • Traditional RCSAs remain time intensive, subjective and too often treated as compliance exercises
  • Risk leaders see potential for trigger-based, data-driven and eventually dynamic assessments
  • Data access, security and internal processes can be greater barriers than technology
  • AI can already reduce manual control documentation and support risk analysis
  • Fully agentic RCSAs require more automated controls and mature underlying risk frameworks
Log in to continue or register for free
WHAT'S INCLUDED:
Unlimited access to peer-contribution articles and insights
Global research and market intelligence reports
Discover Connect Magazine, a monthly publication
Panel discussion and presentation recordings
Sign in to view comments
ad
Related insights