Mike Hsu, the former acting Comptroller of the Currency, explains how waiting to adopt artificial intelligence has become a risk for banks and their regulators. He discusses why AI does not fit neatly into existing risk frameworks, how agentic AI is changing the cyber threat landscape, and why both banks and supervisors need to get more hands-on with the technology.