Third-party concentration, resilience and bank governance
Banks integrating external agents must manage permissions, logging, fallback, concentration, vendor assurances, outages and cross-border regulation.
Executive question
Can we explain and recover from agent errors and provider failures?
What to measure
- Critical agent inventory and supplier dependencies
- Recovery from third-party incidents
- Audit, stress-test and human override coverage
Relevant products and standards
AWS's service for deploying and running AI agents in production, with identity, memory, tool access and monitoring, whichever framework or model is used.
Agent registry, identity, management, observability and governance.
Copilot Studio is a platform to build, customize, deploy and manage AI agents and workflows with built-in security and governance.
Microsoft Entra Agent ID gives AI agents managed identities and access controls; Microsoft Purview applies data security and compliance controls to agent activity.
Relevant examples, not documented integrations, completeness, certification or endorsement. Listed alphabetically.
Evidence and current limits
Regulatory obligations vary; this is not jurisdiction-specific legal advice.
Research candidate — reviewer approval required