Canada’s E-23: what it means for AI governance in banks

TL;DR: Canada’s OSFI Guideline E-23 moves bank AI oversight from periodic model review to continuous lifecycle governance, with stronger expectations for inventories, lineage, monitoring, approvals and accountability across GenAI, third-party models and autonomous agents, according to ValidMind. The operating challenge is now execution at scale, not policy drafting.

Editorial analysis by NHI Mgmt Group, based on content published by ValidMind: “What Most Banks Are Missing about Canada’s E-23”.

Key questions

Q: How should banks implement continuous AI governance under regulations like E-23?

A: Banks should treat AI governance as an operational workflow that spans inventory, approval, validation, monitoring, escalation and decommissioning.

Q: Why does dynamic AI behaviour create more governance risk than traditional software models?

A: Dynamic AI systems learn, adapt, and make decisions in ways that are harder to predict and fully explain than static applications.

Q: What are the signs that AI governance is failing in the enterprise?

A: Common warning signs include rapid growth in AI use without matching policy coverage, sensitive files being copied into personal accounts, and a large share of AI apps carrying high or critical risk.

Practitioner guidance

• Standardise lifecycle evidence capture Automate the collection of inventories, approvals, validation results, monitoring outputs and remediation history so evidence remains current across the AI estate.
• Define bounded authority for AI systems Document who can deploy, change, approve, suspend and decommission AI systems, including autonomous agents that influence decisions or customer interactions.
• Centralise governance workflows Move governance reviews out of spreadsheets and email chains into repeatable workflows that preserve lineage, escalation paths and sign-off history.

Bottom line: E-23 reinforces that AI governance must operate across the full lifecycle, not just at validation checkpoints.

Explore further

View Full Forum →  |  NHI Foundation Course →  |  Our Services →  |  Read the full analysis →