Singapore MAS Guidelines on Artificial Intelligence Risk Management (2026)
Section 5 AI life cycle controls: data, transparency, fairness, human oversight, third-party AI, selection, evaluation and testing, technology and cyber, reproducibility, pre-deployment review, monitoring, change management and retirement (paragraphs 5.1 to 5.26) – Singapore MAS Guidelines on Artificial Intelligence Risk Management (2026)

Singapore MAS Guidelines on Artificial Intelligence Risk Management (2026) 5.25: Change management for deployed AI: a framework to judge the significance of changes by nature and materiality, with reviews and re-approval before significant changes and compensating controls where high-materiality changes occur without prior review; change control with human oversight and version control over code, data, parameters, hyperparameters and artefacts supporting traceability and rollback; and enhanced controls for automatically updating AI with strict justification, defined update scope, extra data quality checks and stricter performance monitoring

What does 5.25 require?

Changes to live AI are controlled comprehensively so that they cannot quietly cause unintended behaviour, worse performance or a drift away from the intended use. Three elements. Scope: a framework for judging how significant a change is, from its nature (training data, model or system architecture, key assumptions, scope of use, knock-on effects on downstream AI) and from the materiality of the use case, with significant changes reviewed and re-approved before they go in, and compensating measures such as heightened monitoring where significant changes to high-materiality uses can occur without prior review. Change control: mechanisms, under human oversight, that block unauthorised alteration and ensure changes to code, configuration or training data do not cause outages, disruption or degraded performance, backed by version control that tracks not only model code but the associated data, parameters, hyperparameters and other artefacts, giving traceability, auditability and the ability to roll back. Dynamic updates: stronger controls for AI built to update itself, including a strict case for allowing automatic updates at all, a clear boundary on what may change automatically (retraining or hyperparameters, say, but never the core architecture), extra data quality checks and tighter performance monitoring.

Maintained by Gerard Blokdyk

Other controls in Section 5 AI life cycle controls: data, transparency, fairness, human oversight, third-party AI, selection, evaluation and testing, technology and cyber, reproducibility, pre-deployment review, monitoring, change management and retirement (paragraphs 5.1 to 5.26) – Singapore MAS Guidelines on Artificial Intelligence Risk Management (2026)

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.