Shadow AI: It’s Already in the Bank. Can You Stop It?

Shadow AI is no longer confined to employees experimenting with unapproved chatbots. It is appearing in everyday workflows, approved technology and emerging agents as financial institutions move AI from pilots into production.

PJ Di Giammarino talks with EPAM’s Sandro Schmid and Michael Nicholls about what happens when adoption moves faster than control. Can management see where AI is operating? Who owns it? What is it authorised to do? Where does meaningful human oversight sit, and what evidence is needed to demonstrate that the control environment is actually working?

The discussion looks at the shift from AI governance as policy towards practical AI Control in production, including visibility, ownership, authority, continuous assurance and the conditions firms need to scale AI safely.

This episode accompanies RegRisk Navigator 21, “Your AI is crossing the line. Now what?”, as Season 8 of RegCast goes Below the Waterline ahead of the RegRisk Control Forum on 15 October.