Beyond Compliance - Evaluating Risk Detection And Early Warning Systems In Indian Corporate Governance

Author: LawSphereX

Category: Corporate & Insolvency

Published: 2026-08-23T18:28:40.044328+00:00

Updated: 2026-08-26T17:11:49.62+00:00

BEYOND COMPLIANCE: EVALUATING RISK DETECTION

AND EARLY WARNING SYSTEMS IN INDIAN CORPORATE

GOVERNANCE

Junairiya T H, LL.M., Amity Law School, Amity University, Bengaluru. Dr. Ashwani Singh, Assistant Professor, Amity Law School, Amity University, Bengaluru

ABSTRACT

India's corporate governance framework has evolved substantially over two decades, with the Companies Act, 2013 and the SEBI (Listing Obligations and Disclosure Requirements) Regulations, establishing a comprehensive framework of disclosure obligations, board accountability mechanisms, and audit oversight structures. Yet the recurring incidence of large-scale corporate failures—across manufacturing, banking, and infrastructure sectors—reveals a persistent disjunction between formal regulatory compliance and substantive governance quality. This paper interrogates that disjunction by examining whether compliance-oriented governance frameworks are structurally adequate to detect and pre-empt corporate risk, and by evaluating the potential of Early Warning Systems (EWS) and AI-enabled predictive governance tools to remedy the observed deficiencies.

Employing a doctrinal and analytical methodology, the paper critically examines India's primary statutory and regulatory governance instruments alongside academic scholarship, regulatory consultation papers, and institutional risk governance research. The paper finds that while India's compliance framework has progressively strengthened formal obligations, structural features such as promoter dominance, information asymmetry, and ex-post enforcement orientation systematically impair early risk detection. Predictive governance tools—including machine learning models, continuous financial surveillance systems, and AI-assisted regulatory monitoring—offer meaningful capacity for identifying early warning signals before governance failures escalate into systemic crises.

However, such technologies introduce their own governance challenges relating to algorithmic opacity, accountability gaps, and regulatory underpreparedness. The paper concludes that predictive governance can significantly strengthen corporate accountability in India, provided it operates within an appropriately calibrated legal framework characterised by transparency, human oversight, and responsible AI governance. Keywords: Corporate Governance; Early Warning Systems; Artificial Intelligence; Predictive Governance; India; Companies Act, 2013; SEBI; Risk Detection

I.

Introduction Corporate governance constitutes the institutional framework through which corporate power is directed, monitored, and held accountable. Beyond protecting investors, it shapes managerial decision-making, market confidence, and the long-term sustainability of corporate enterprises. In India, the legal architecture governing corporate conduct has undergone substantial transformation over the past two decades, culminating in the enactment of the Companies Act,

20131 and the promulgation of the SEBI (Listing Obligations and Disclosure Requirements)

Regulations, 20152. Together, these instruments collectively constitute a dense regulatory scaffolding encompassing independent directors, audit committees, disclosure obligations, related-party transaction controls, and enterprise risk management frameworks3. By formal standards, the Indian governance landscape today bears little resemblance to the poorly regulated environment of the early 1990s. Yet this narrative of progressive regulatory maturation sits uncomfortably alongside a record of repeated major corporate governance failures.

The Satyam Computers fraud of 2009, which exposed the systematic fabrication of cash balances and revenues over several years,4 was followed within a decade by the collapse of YES Bank amid unchecked non-performing assets and governance irregularities5, and the implosion of Infrastructure Leasing & Financial Services, whose combined liabilities threatened the stability of India's broader credit markets6. The Sahara, Kingfisher, and PNB-Nirav Modi affairs added further weight to the observation that recurrent governance failures are not merely individual incidents of managerial misconduct but reflect structural shortcomings in the architecture of regulatory oversight7. These scandals shared a common pathology: governance failures that accumulated over extended periods without generating effective regulatory response until crises became visible and unavoidable.

1 The Companies Act, No. 18 of 2013, Acts of Parliament, 2013 (India).

2 Securities and Exchange Board of India, Securities and Exchange Board of India (Listing Obligations and Disclosure Requirements) Regulations, 2015.

3 Rajesh Chakrabarti, Corporate Governance in India - Evolution and Challenges, SSRN Journal (2005),

http://dx.doi.org/10.2139/ssrn.649857 4 Madan Lal Bhasin, Corporate Accounting Fraud: A Case Study of Satyam Computers Limited, 2 Open Journal of Accounting 26 (2013), https://www.scirp.org/journal/paperinformation?paperid=30220

5 Kushi Singh & Shaswat Kumar Chandan , Corporate Governance Failure An Overview Of The New Emerging

Scam Of A Private Sector Bank. (A Case Study Of YES BANK) , 10 International Journal for Research Trends and Innovation (www.ijrti.org) (2025). https://www.ijrti.org/papers/IJRTI2504206.pdf 6 Dr. Anjali Arora, Corporate Governance Failure at IL&FS: The Role of Internal and External Mechanisms,

1 Asian J. Manage. Commerce 43 (2020), https://www.allcommercejournal.com/archives/2020.v1.i1.A.63

7 Vivek Malhotra and Rohan Aniraj, Corporate Governance Failures in India | International Journal of Law Management & Humanities, https://ijlmh.com/paper/corporate-governance-failures-in-india/

The persistent recurrence of such failures prompts a fundamental question about the sufficiency of compliance-oriented governance. Compliance-based frameworks proceed on the assumption that mandating disclosure, prescribing board structures, and imposing auditing obligations will, in aggregate, produce well-governed corporations. What they are less capable of achieving is the proactive identification of evolving risk trajectories before those risks crystallise into reportable governance failures8. The distinction between legal compliance and effective risk governance is analytically important and practically consequential. An enterprise may satisfy every mandatory disclosure, constitute every required committee, and still conceal a deteriorating financial position through the very disclosure mechanisms the law provides.

Against this background, the emergence of Early Warning Systems and AI-enabled predictive analytics as tools of corporate governance acquires particular significance for the Indian regulatory context. Early Warning Systems encompass a range of quantitative and qualitative mechanisms designed to identify pre-crisis indicators financial ratios, governance signals, market anomalies, and behavioural patterns at a stage where corrective intervention remains feasible9. When integrated with machine learning models and large-scale data analytics, such systems can detect the subtle precursors of corporate distress that periodic audits and annual disclosures are structurally unable to capture10.

SEBI's 2025 Consultation Paper on Responsible AI Usage in securities markets11 and its 2026 advisory on AI-enabled vulnerability detection12 collectively signal a regulatory recognition that governance capacity must evolve alongside technological capability. The central premise of this paper is that India's corporate governance framework has progressively strengthened compliance obligations, yet recurring corporate failures demonstrate that compliance alone is insufficient. Predictive governance supported by AIenabled Early Warning Systems can significantly strengthen corporate accountability, provided such technologies operate within an appropriate legal and regulatory framework characterised 8 José-Miguel Bello Y Villarino & Simon Bronitt, AI-Driven Corporate Governance: A Regulatory Perspective, 33 Griffith Law Review 355 (2024), https://www. tandfonline. com/doi/full/10.

1080/10383441. 2024. 2405752 9 Shikha Bagai, Approach to Building Early Warning Signals (EWS) Framework Considering Market-Specific Antecedents for Indian Corporate Credit Defaults (2022). 10 Judit Katalin Fejes & Etelka Éva Katits, Developing Early Warning Systems in the Era of Company Crisis Prevention (2025), https://zenodo. org/doi/10. 5281/zenodo. 17088464 11 Securities and Exchange Board of India, Consultation Paper on Guidelines for Responsible Usage of AI/ML in Indian Securities Markets, (June 20, 2025). 12 Securities and Exchange Board of India, Advisory on Emerging Advanced Artificial Intelligence (AI) Tools for Vulnerability Detection (Like Mythos), Circular No. HO/13/19/12(1)2026-ITD-1_CIMGI/10873/2026 (May 5, 2026).

by transparency, accountability, human oversight, and responsible governance13. The paper proceeds in five analytical stages: a critical examination of the existing literature; an evaluation of India's compliance-based governance architecture and its structural limitations; an assessment of EWS and AI-enabled risk detection mechanisms; a discussion of reforms necessary for responsible deployment of predictive governance tools; and a survey of future research directions. The discussion focuses primarily on listed corporate entities and the Indian securities regulatory framework II.

Literature Review Existing scholarship on Indian corporate governance may broadly be grouped into interconnected strands examining governance regulation, governance quality, corporate failures, risk management, and, more recently, AI-enabled governance. Scholarship examining the structure and operation of India's regulatory framework has documented the evolution from pre-liberalisation laxity through successive waves of reform from the Birla and Narayana Murthy Committee recommendations to the codification of the Companies Act, 2013 while consistently identifying a troubling gap between formal regulatory design and practical governance outcomes14.

Chakrabarti's foundational analysis of governance evolution observed that India's common law heritage provided a strong statutory foundation, yet concentrated ownership, pyramidal group structures, and the operational passivity of nominee directors on boards systematically undermined whatever formal protections the law provided15. More recent doctrinal scholarship has echoed this diagnosis: promoter dominance persists as a structural feature of Indian corporate ownership; board independence remains more formal than substantive; and the complexity of India's regulatory apparatus has paradoxically created conditions conducive to compliance theatre rather than genuine accountability16. Another important strand of scholarship concerns the empirical measurement of governance quality and its relationship to firm performance.

Sarkar, Sarkar, and Sen's construction of a Corporate Governance Index for 500 large listed companies demonstrated that governance standards improved measurably following SEBI's reforms, with Audit Committee structures 13 Ministry of Electronics & Information Technology, Government of India, India AI Governance Guidelines: Enabling Safe and Trusted AI Innovation (2025).

14 Rajesh Chakrabarti, supra note 3.

15 Id.

16 Amit Prasad, Regulatory Framework of Corporate Governance in India: An Analysis, 11 IJAR&D (2025), https://bhartiijard.com/wp-content/uploads/2025/vol-11-i2/chapter-19.pdf

showing the greatest gains, and that firms with stronger governance consistently earned superior market returns17. The SEBI Committee Report of 2017 acknowledged that Indian governance frequently satisfied the letter of regulatory requirements while failing in implementation, identifying promoter-controlled boards and weak audit processes as persistent fault lines18. Srivastava's institutional analysis of governance failures in financial institutions reinforced the view that failures typically arise not from the absence of legal frameworks but from misaligned managerial incentives, weak board monitoring, and the inadequacy of existing "four lines of defence" models when confronted with complex institutional misconduct19. Literature examining specific governance failures has served to illustrate these structural pathologies with empirical precision.

The Satyam and YES Bank analyses reveal that external auditors, credit rating agencies, and independent directors all institutions that compliance frameworks treat as safeguards simultaneously failed to detect or communicate obvious governance deterioration20. The IL&FS crisis demonstrated that even entities subject to regulatory oversight by multiple authorities could accumulate systemic risk over years without triggering effective supervisory response21. Collectively, these case studies suggest that compliance-oriented governance operates primarily through reactive accountability mechanisms, with intervention typically occurring only after governance failures become externally visible. The literature on Enterprise Risk Management points in a similar direction.

The OECD's 2014 study found that corporate boards devote insufficient time to risk management and lack adequate understanding of the risk landscape, while governance frameworks predominantly emphasise internal control rather than ex-ante risk identification22. Dhar's analysis of ERM's interdependence with corporate governance argued that risk management must shift from a defensive posture to a strategic one, integrating risk appetite, risk transparency, and proactive risk process design into the governance architecture23. Afsharipour's survey of board risk 17 Jayati Sarkar, Subrata Sarkar & Kaustav Sen, A Corporate Governance Index for Large Listed Companies in India, SSRN Journal (2012), http://www. ssrn. com/abstract=2055091

18 SEBI, Report of the Committee on Corporate Governance (Oct. 5, 2017).

19 Ashish Srivastava, Governance in Financial Institutions: Key Elements and Preventing the Failures,

7 AJEB 424 (2023), http://www.emerald.com/ajeb/article/7/3/424-434/60300

20 Madan Lal Bhasin, supra note 4; Kushi Singh & Shaswat Kumar Chandan, supra note 5.

21 Dr. Anjali Arora, supra note 6.

22 OECD, Risk Management and Corporate Governance (2014), https://www.oecd.org/en/publications/riskmanagement-and-corporate-governance_9789264208636-en.html 23 Sujoy Kumar Dhar, A Critical Analysis of Enterprise Risk Management Processes and Its Interdependence on the Corporate Governance Framework, SSRN Journal (2013), http://www.ssrn.com/abstract=2288833

management in Indian firms found that while the Companies Act and SEBI regulations formally required board-level oversight of risk, the practical depth of such oversight varied enormously24. The emerging literature on AI-enabled governance and Early Warning Systems represents the most significant development in recent years. Bello Y Villarino and Bronitt's regulatory analysis of AI-driven compliance management systems identified continuous monitoring and early detection as transformative advantages over traditional audit-based frameworks, but also cautioned that automated systems risk displacing human judgment in ways that undermine accountability and create new opacity25. This concern assumes particular significance in India, where regulatory discussions increasingly emphasise explainability, accountability, and human oversight in AI deployment26.

Bagai's development of a market-specific EWS framework for Indian corporate credit defaults concluded that existing quantitative models, including Altman Z-score variants, were inadequate for the Indian context because they failed to capture qualitative governance signals and information asymmetries specific to Indian market conditions27. Bertoni, De Rosa, and Peressin raised the important counterpoint that EWS can themselves induce managerial myopia by directing board attention towards narrow quantitative thresholds at the expense of broader strategic risk awareness28. Casciello's Italian study of early warning indicators and their integration with insolvency regulation demonstrated the potential for statutory EWS frameworks to improve financial distress detection, but also highlighted that effectiveness depends on continuous monitoring rather than periodic assessment29.

Methodologically, the literature exhibits consistent limitations. Most empirical studies focus on listed large-cap firms, leaving the governance of mid-cap and private companies largely unexplored. The systematic review by Almaqtari et al. covering 161 studies identified significant gaps in audit quality research, post-2015 governance developments, and the application of advanced analytical methods30. Scholarship on AI's role in Indian corporate 24 Afra Afsharipour, Risk Management and the Board of Directors in Indian Firms, NSE Ctr. for Excellence in Corp. Governance, Quarterly Briefing No. 14 (July 2016).

25 José-Miguel Bello Y Villarino & Simon Bronitt, supra note 8.

26 SEBI, supra note 11.

27 Shikha Bagai, supra note 9.

28 Michele Bertoni, Bruno De Rosa & Laura Peressin, Early Warning Systems: A Risk of Increasing Managerial Myopia? (univ. publication) (2019). 29 Raffaela Casciello, Early Warning Indicators: An Empirical Investigation in Italian Context and First Implications for Corporate Governance, 5 CGOBR 56 (2021), https://virtusinterpress.org/Early-warningindicators-An-empirical-investigation-in-Italian-context-and-first-implications-for-corporate-governance.html. 30 Faozi A. Almaqtari et al., Corporate Governance in India: A Systematic Review and Synthesis for Future Research, 7 Cogent Business & Management 1803579 (2020), https://doi.org/10.1080/23311975.2020.1803579

governance remains nascent, with regulatory consultation papers and government guidelines outpacing doctrinal and analytical academic work31. The principal research gap that emerges from this survey is the absence of a comprehensive analytical framework that integrates India's statutory governance architecture with emerging predictive technologies while critically examining the regulatory preconditions for responsible AI deployment in corporate governance contexts. The present study seeks to contribute to this emerging area by integrating these strands of scholarship within a single analytical framework focused on predictive governance in the Indian corporate context. III.

Compliance-Based Corporate Governance in India: Strengths and Structural Limitations India's corporate governance framework rests on an interlocking system of statutory obligations and regulatory requirements, the most significant of which are the Companies Act,

201332 and the SEBI LODR Regulations33. The Companies Act establishes the foundational

architecture of corporate accountability through provisions governing board constitution, director duties, audit mechanisms, and fraud investigation. Its provisions mandating the composition and functions of Audit Committees34, the maintenance of books of account35, the role of statutory auditors36, and the establishment of internal audit functions37 collectively constitute the primary statutory framework for financial oversight. The LODR Regulations, applicable to listed entities, supplement this foundation with continuous disclosure obligations, board performance evaluation requirements, risk management frameworks, and vigil mechanism mandates38. On its face, this apparatus represents a sophisticated governance regime that seeks to promote transparency, accountability, and effective corporate oversight through an integrated framework of statutory and regulatory obligations.

The strengths of this framework are genuine and should not be understated. The mandatory constitution of independent director majorities within audit committees creates institutional

31 SEBI, supra note 11.

32The Companies Act, No. 18 of 2013, Acts of Parliament, 2013 (India). 33 Securities and Exchange Board of India, Securities and Exchange Board of India (Listing Obligations and Disclosure Requirements) Regulations, 2015.

34 The Companies Act, 2013, Sec. 177.

35 Id. Sec. 128.

36 Id. Sec. 139–148.

37 Id. Sec. 138.

38 SEBI (Listing Obligations and Disclosure Requirements) Regulations, 2015, regs. 17–27.

separation between management and financial oversight. The requirement that audit committees oversee the appointment and independence of external auditors reduces though does not eliminate management's capacity to influence the audit process. Disclosure obligations under the LODR Regulations, including event-based reporting of material developments, require listed entities to maintain transparency as a matter of continuous obligation rather than periodic convenience39. The vigil mechanism requirements impose on listed entities the obligation to maintain whistleblower channels capable of surfacing internal governance concerns before they escalate40.

The SAST Regulations introduce a further dimension of governance surveillance through mandatory disclosure triggers tied to shareholding thresholds, enabling regulatory monitoring of acquisition patterns that may signal shifts in corporate control and associated governance risks41. However, a critical assessment of India's compliance architecture reveals structural limitations that recur with striking regularity in the corporate failure literature. The first and most fundamental is the distinction between formal compliance and substantive governance. Chakrabarti identified as long ago as 2005 that India's governance problem was primarily one of implementation rather than design, a finding that later scholarship has reinforced rather than superseded42.

Promoter-dominated boards, common in India's concentrated ownership landscape, may nominally satisfy independent director requirements while ensuring that those directors either lack the information necessary for effective oversight or operate within institutional cultures that discourage genuine challenge of management43. Sapovadia and Patel's analysis of governance levers emphasised that regulatory design activates effective governance only when the constituent actors shareholders, independent directors, auditors, and regulators discharge their roles with substantive rather than performative commitment44. Second, the framework's reliance on periodic and event-based disclosure as its primary risk detection mechanism reflects a fundamentally reactive approach to corporate oversight.

Disclosures are most informative about risks that have already materialised sufficiently to require reporting. The Satyam fraud, which involved systematic falsification of financial

39 SEBI (Listing Obligations and Disclosure Requirements) Regulations, 2015, regs. 30, 46.

40 Id. reg. 22.

41 Securities and Exchange Board of India (Substantial Acquisition of Shares and Takeovers) Regulations, 2011, regs. 29–31.

42 Rajesh Chakrabarti, supra note 3.

43 Amit Prasad, supra note 16.

44 Vrajlal K. Sapovadia & Akash Patel, Levers of Corporate Governance in India: Critical Analysis through Prism of Legal Framework, SSRN Journal (2013), http://dx.doi.org/10.2139/ssrn.2214441

statements over several years, was not identified through the disclosure system it was required to maintain it was ultimately exposed through a voluntary confession45. The YES Bank crisis similarly accumulated over years of aggressive lending and NPA concealment without triggering sufficient regulatory response, despite the existence of mandatory disclosure obligations and RBI supervisory oversight46. The IL&FS collapse demonstrated that multiple regulators with statutory oversight authority could simultaneously fail to detect systemic risk within a major infrastructure finance company47. What these cases share is not the absence of a compliance framework but its inadequacy as an early warning mechanism. Third, the regulatory framework's assumption that boards of directors will function as effective risk monitors has been repeatedly confounded by structural realities.

The OECD's analysis of risk management and corporate governance found that boards routinely lack the expertise, time, and independence necessary to exercise genuine risk oversight rather than approving management-generated risk assessments48. Thanigaiyarasu et al. introduced the analytically important concept of "personality risk" the risk that directors' individual behavioural and cognitive dispositions compromise governance quality in ways that formal qualification requirements cannot address49. These governance limitations are particularly acute in promoter-controlled companies, where the chairman-CEO overlap, which the Satyam case illustrated with devastating clarity, concentrates informational and decisional authority in ways that undermine the board's structural capacity for independent oversight50.

Fourth, Enterprise Risk Management frameworks mandated under the Companies Act and LODR Regulations have not fulfilled their theoretical potential as proactive governance mechanisms. Dhar's analysis found that ERM in practice often remained defensive and compliance-oriented rather than strategically integrated, with boards treating risk reporting as a regulatory obligation rather than a substantive governance tool51. The OECD study corroborated this finding, observing that governance frameworks overemphasise financial and internal control risks while neglecting strategic, operational, and reputational risks that may

45 Madan Lal Bhasin, supra note 4.

46 Kushi Singh & Shaswat Kumar Chandan, supra note 5.

47 Dr. Anjali Arora, supra note 6.

48 OECD, supra note 22.

49 Thanigaiyarasu, R., et al. CORPORATE GOVERNANCE AND STRATEGIC RISK MANAGEMENT: AN

EMPIRICAL STUDY OF BOARD EFFECTIVENESS IN DECISION-MAKING, Lex Localis: Journal of Local Self-Government 23 (2025).

50 Madan Lal Bhasin, supra note 4.

51 Sujoy Kumar Dhar, supra note 23.

pose the greatest threat to long-term corporate viability52. The significant beneficial ownership register requirements under Section 90 of the Companies Act53 address ownership transparency in principle but have proven difficult to enforce in practice against layered corporate structures. Similarly, the charge registration system under Sections 77 to 87 provides valuable information regarding corporate indebtedness but functions primarily as a lagging indicator of leverage accumulation rather than as a mechanism capable of identifying emerging financial risks in real time. Finally, enforcement mechanisms remain a persistent weakness. The Serious Fraud Investigation Office and the Registrar's inspection powers54 provide statutory frameworks for post-facto investigation of governance failures, and Section 447's fraud provisions impose significant criminal liability55.

Yet the operational experience of these enforcement agencies suggests that these mechanisms function more effectively as deterrents and remedies after failure than as anticipatory interventions. Malhotra and Aniraj's synthesis of major governance failures concluded that the persistence of corporate fraud in India reflected inadequate risk management, weak regulatory coordination, and delays in judicial processes that collectively neutralised the deterrent effect of formal sanctions56. What India's compliance framework currently lacks is a systemic capacity for prospective risk detection the ability to identify emerging governance vulnerabilities before they crystallise into reportable events.

It is precisely this prospective risk-detection capacity that Early Warning Systems are designed to provide, thereby shifting corporate governance from a predominantly reactive model towards one grounded in continuous monitoring and preventive intervention57. IV.

Early Warning Systems and AI-Enabled Risk Detection in Corporate Governance Early Warning Systems in corporate governance refer to systematic mechanisms designed to identify pre-crisis indicators financial, operational, governance-related, and behavioural at a stage where corrective regulatory or management intervention remains feasible. Their conceptual foundation rests on two propositions: that corporate crises rarely emerge without antecedent warning signals, and that those signals can be identified and acted upon if

52 OECD, supra note 22.

53 The Companies Act, No. 18 of 2013, Sec. 90 (India).

54 Id. Sec. 206–212.

55 Id. Sec. 447.

56 Vivek Malhotra & Rohan Aniraj, supra note 7.

57 José-Miguel Bello Y Villarino & Simon Bronitt, supra note 8; Shikha Bagai, supra note 9.

appropriate monitoring mechanisms are in place58. Traditional EWS frameworks relied primarily on quantitative financial indicators liquidity ratios, leverage measures, profitability trends, and cash flow patterns drawn from periodic financial reporting. The Altman Z-score model and its variants have long represented the canonical approach: using discriminant analysis to assign distress probabilities based on financial ratios. Such models provided modest predictive accuracy in developed-market contexts but have proven insufficiently precise for Indian conditions, where defaults often arrive with a "surprise element" that standardised financial ratios fail to anticipate59. The integration of artificial intelligence and machine learning into EWS frameworks represents a qualitative transformation in the capacity for corporate risk detection.

AI-enabled analytical models are capable of processing significantly larger volumes of financial and non-financial data than traditional statistical techniques, identifying complex risk patterns, and generating more accurate assessments of potential corporate distress through continuous analysis rather than periodic evaluation60. Fejes and Katits's recent analysis of AI-based EWS demonstrated that deep learning models and edge AI enable real-time risk monitoring and scenario simulation, replacing the periodic assessment of traditional approaches with continuous surveillance of corporate financial health61. Lawal's work on board oversight and financial risk confirmed that data analytics-enhanced EWS improve the detection of credit risk, fraud signals, and liquidity vulnerabilities in ways that conventional audit and disclosure mechanisms cannot replicate62.

SEBI's regulatory evolution provides the most direct evidence of institutional recognition that AI must be integrated into corporate governance and market supervision frameworks in India. The 2025 Consultation Paper on Responsible AI Usage in Indian Securities Markets acknowledged that AI and machine learning applications were already extensively deployed for exchange surveillance, cybersecurity, anti-money laundering systems, compliance automation, and portfolio management63. The paper proposed a governance framework requiring continuous monitoring, human-in-the-loop supervision, independent AI audits, 58 Swayam Prava Mishra, Corporate Credit Risk of Indian Manufacturing Companies: Towards an Early Warning System (Ph. D. Thesis, Univ. of Hyderabad 2011).

59 Shikha Bagai, supra note 9.

60 José-Miguel Bello Y Villarino & Simon Bronitt, supra note 8.

61 Judit Katalin Fejes & Etelka Éva Katits, supra note 10.

62 Garba Sani Lawal, Board Oversight and Financial Risk: Enhancing Governance at the Top (2025).

63 SEBI, supra note 11.

periodic accuracy reporting to regulators, and senior management accountability for AI deployment64. The 2026 advisory on AI-enabled vulnerability detection went further, directing regulated entities to implement AI-augmented Security Operations Centres for continuous vulnerability management, mandating integration with centralised market surveillance infrastructure through the jointly established Market Security Operations Centre, and expressly recognising AI-driven attack capabilities as a distinct risk scenario requiring calibrated regulatory response65. The governance benefits of AI-enabled risk detection operate across multiple dimensions simultaneously.

At the financial risk level, machine learning models applied to corporate financial data can identify deteriorating patterns in working capital management, receivables quality, and debt service coverage months before those patterns breach statutory disclosure thresholds66. At the governance structure level, AI can analyse board composition dynamics, director independence patterns, related-party transaction frequencies, and audit committee activity to generate governance risk profiles that supplement or improve upon formal compliance metrics67. Bello Y Villarino and Bronitt argued that AI-driven compliance management systems enable a qualitative shift from reactive audit-based enforcement towards continuous monitoring, with the potential to identify governance failures at an early stage rather than investigating them after collapse68. Kakani et al.

's survey of AI-based risk management in financial services confirmed that AI tools generate both improved efficiency and enhanced predictive accuracy in regulatory compliance and risk assessment contexts69. Beyond securities regulation, India's insolvency framework also demonstrates how existing regulatory infrastructure could support predictive corporate governance. Within India's institutional context, the IBC's Information Utility framework provides an existing statutory infrastructure capable of supporting AI-enabled risk monitoring at scale. The IBC defines "financial information" broadly to encompass records of debts, liabilities, defaults, balance sheets, and cash-flow statements70, and Information Utilities are designed to record,

64 Id.

65 SEBI, supra note 12.

66 S. S. Kapri, The Role of Corporate Governance in Mitigating Financial Risk: An Indian Experiences (2021),

12 jcdr (2023),

http://www.jcdronline.org/paper.php?slug=the-role-of-corporate-governance-in-mitigatingfinancial-risk-an-indian-experiences

67 José-Miguel Bello Y Villarino & Simon Bronitt, supra note 8.

68 Id.

69 Ajay Babu Kakani et al., A Survey on Regulatory Compliance And AI-Based Risk Management in Financial Services (2023), 10.63282/3050-9262.IJAIDSML-V4I4P106 70 The Insolvency and Bankruptcy Code, No. 31 of 2016, Acts of Parliament, 2016 (India); definition of "financial

authenticate, and disseminate this information in real time71. The CIRP Regulations' requirement that creditors furnish tax compliance records, including GST returns and e-way bills, as part of insolvency proceedings integrates transactional data into insolvency risk assessment in ways that could, if connected to continuous monitoring infrastructure, function as prospective financial health indicators72. Similarly, the SAST Regulations' shareholding disclosure thresholds and the LODR Regulations' event-based reporting requirements generate data streams that, when aggregated and subjected to machine learning analysis, could reveal acquisition patterns or disclosure anomalies indicative of governance stress73. Nevertheless, the case for AI-enabled EWS requires qualification on several grounds.

Bertoni, De Rosa, and Peressin's cautionary analysis identified the risk of managerial myopia the tendency of EWS to focus board attention on narrow quantitative indicators at the expense of qualitative governance assessment and strategic risk thinking74. Ruth's work on internal audit efficiency noted that technology-enhanced monitoring must be accompanied by institutional capacity to interpret and act upon algorithmic outputs, a requirement that presupposes human expertise that many Indian organisations currently lack75. Bagai's research on Indian corporate credit defaults identified information asymmetry and market-specific qualitative factors as critical predictors of distress that quantitative AI models may inadequately capture76.

Mishra's earlier empirical study of Indian manufacturing sector credit risk found that even relatively sophisticated statistical models achieved limited predictive accuracy in the Indian context, partly because the absence of uniform bankruptcy data undermined model calibration77. The deeper question that AI-enabled EWS raise is whether they strengthen governance or merely improve monitoring capacity. These are related but analytically distinct functions. Monitoring capacity refers to the technical ability to identify emerging risk signals, whereas information. "

71 Id.

72 Insolvency & Bankruptcy Board of India, Insolvency and Bankruptcy Board of India (Insolvency Resolution Process for Corporate Persons) Regulations, 2016, as amended; requirement relating to GST returns, GSTR-1, GSTR-3B and e-way bills. 73 Securities and Exchange Board of India (Substantial Acquisition of Shares and Takeovers) Regulations, 2011, regs. 29–31; Securities and Exchange Board of India (Listing Obligations and Disclosure Requirements) Regulations, 2015, reg. 30.

74 Michele Bertoni, Bruno De Rosa & Laura Peressin, supra note 28.

75 Onyenum Ruth Udoh, Enhancing internal audit efficiency for effective risk management and corporate governance frameworks, International Journal of Research Publication and Reviews 5.12 (2024): 3646-3659, 10.55248/gengpi.5.1224.250122

76 Shikha Bagai, supra note 9.

77 Swayam Prava Mishra, supra note 58.

governance strength refers to the institutional capacity to translate those signals into timely regulatory, managerial, and accountability responses. An AI system that accurately identifies a deteriorating governance profile in a listed company creates value only if that signal is received by a regulator with the authority, will, and operational capacity to intervene. India's enforcement record suggests that this translation from signal to response represents the more challenging governance problem. Accordingly, AI-enabled EWS should be understood as a necessary but not sufficient condition for improving corporate governance outcomes a powerful complement to institutional governance mechanisms rather than a substitute for them78. V.

Towards Predictive Corporate Governance: Reforming India's Regulatory Framework India's readiness for predictive corporate governance is both more advanced than casual assessment might suggest and more constrained than the ambition of recent regulatory documents implies. The India AI Governance Guidelines issued by the Ministry of Electronics and Information Technology in 2025 established a national framework for responsible AI deployment built around seven governance principles trust, people-centricity, human oversight, innovation, fairness, accountability, and understandability and identified accountability and understandability by design as foundational requirements for AI systems that affect individuals and markets79.

NITI Aayog's Responsible AI framework similarly emphasised that AI deployment must be grounded in constitutional values, with particular attention to transparency, non-discrimination, and human rights protection80. These policy frameworks signal a governmental commitment to responsible AI governance that is broadly compatible with the requirements of predictive corporate governance, yet they remain largely aspirational unless translated into enforceable sector-specific regulatory standards governing AI deployment in corporate governance. For AI-enabled Early Warning Systems to operate effectively and legitimately within India's corporate governance framework, the regulatory framework must evolve beyond enabling technological adoption to establishing clear standards of accountability, transparency, and

78 José-Miguel Bello Y Villarino & Simon Bronitt, supra note 8.

79 Ministry of Electronics and Information Technology, supra note 13.

80 NITI Aayog, Responsible AI for All: Adopting the Framework A Use Case Approach on Facial Recognition Technology (Discussion Paper, Nov. 2022).

institutional oversight. A central requirement is algorithmic accountability: AI systems deployed for governance monitoring must be subject to requirements of explainability the ability to provide comprehensible explanations of how risk assessments are generated and auditability the ability of regulators and subject entities to inspect and verify model behaviour81. SEBI's AI Consultation Paper's proposed requirement for periodic accuracy reporting and independent AI audits represents a promising regulatory initiative in this direction82, but the absence of binding audit standards and explainability requirements means that algorithmic opacity remains a significant governance risk.

The "black-box" characteristics of complex machine learning models are particularly problematic in governance contexts where the entities monitored have legitimate interests in understanding and challenging risk assessments made about them. Second, human oversight must be structurally embedded in any AI-enabled governance framework rather than treated as an optional add-on. SEBI's requirement that organisations deploying AI possess adequate technical expertise to independently supervise and challenge algorithmic outputs83 reflects sound regulatory instinct, but its implementation depends on the availability of appropriately trained personnel within both regulated entities and the regulatory authority itself.

India's corporate governance landscape characterised by variable institutional capacity across firm sizes and sectors creates a significant risk that AI-enhanced monitoring will produce stratified governance outcomes, with larger and better-resourced firms able to deploy and interpret AI tools effectively while smaller entities remain dependent on compliance mechanisms that AI systems are intended to supplement. Institutional reform must also extend beyond the regulation of AI systems themselves to the regulatory authorities responsible for supervising their deployment. SEBI's Market Security Operations Centre and the cyber-suraksha. ai task force represent institutional innovations that combine centralised monitoring infrastructure with collaborative intelligence-sharing among regulated entities84.

These initiatives could serve as the institutional foundation for a broader AI-supported supervisory architecture, integrating financial risk monitoring with governance quality assessment across India's listed corporate sector. The IBC's Information Utility framework offers a further institutional asset that could be leveraged for continuous financial

81 José-Miguel Bello Y Villarino & Simon Bronitt, supra note 8.

82 SEBI, supra note 11.

83 Id.

84 SEBI, supra note 12.

health monitoring if appropriately connected to AI-enabled analysis tools85. Predictive corporate governance should therefore be understood not as a replacement for India's existing compliance framework, but as its evolutionary extension, where continuous datadriven monitoring complements traditional legal oversight while preserving institutional accountability. Implementation challenges are, however, substantial and should not be minimised. The Digital Personal Data Protection Act, 2023 imposes consent and purpose limitation requirements on personal data processing that must be reconciled with the largescale data aggregation that AI-enabled governance monitoring requires86.

The India AI Governance Guidelines' concern with fairness, bias prevention, and inclusive development must be operationalised in governance monitoring contexts where training data may overrepresent large-cap listed firms and underrepresent the diverse population of mid-cap and smaller companies87. SEBI's tiered regulatory framework for AI applying stricter oversight to systems directly affecting investors provides a useful model for differentiating governance monitoring obligations by risk level and systemic significance88. Ultimately, regulatory reform must address not only the technical architecture of AI-enabled EWS but the institutional preconditions for their effective deployment: adequate regulatory capacity, clear accountability frameworks, explainability requirements, and the sustained human governance infrastructure that predictive tools must complement rather than displace.

VI.

Future Directions for Research The analysis undertaken in this paper highlights several unresolved legal, regulatory, and empirical questions that warrant sustained scholarly attention beyond the scope of the present study. The most pressing unresolved legal question concerns the regulatory and liability framework applicable to AI-generated risk assessments in corporate governance contexts. If an AI-enabled EWS generates a false negative failing to identify a governance failure that subsequently materializes the legal consequences for the deploying entity, the regulatory authority, and affected stakeholders remain unclear under existing Indian law. The allocation of responsibility between AI developers, deployers, and supervisory regulators requires careful doctrinal analysis, particularly given the limitations of current data protection and information

85 The Insolvency and Bankruptcy Code, No. 31 of 2016, Acts of Parliament, 2016 (India).

86 The Digital Personal Data Protection Act, No. 22 of 2023, Acts of Parliament, 2023 (India).

87 Ministry of Electronics and Information Technology, supra note 13.

88 SEBI, supra note 11.

technology legislation in addressing AI-specific accountability gaps89. Empirical research is needed to assess the comparative performance of AI-based EWS models across India's diverse corporate landscape spanning different ownership structures, sectors, and firm sizes against the backdrop of India's specific institutional context. Bagai's work demonstrated the limitations of transposing models developed in other markets to Indian conditions, but the literature lacks systematic empirical evaluation of machine learning models applied specifically to Indian governance datasets90. Interdisciplinary research connecting legal scholars, computer scientists, and governance practitioners is needed to address the technical and normative dimensions of algorithmic explainability in governance contexts.

The gap between what machine learning models can mathematically demonstrate and what regulators and affected corporations can meaningfully comprehend and engage with represents a governance problem that cannot be resolved through legal analysis alone91. Finally, SEBI's evolving regulatory framework including the finalisation of its AI governance guidelines and the development of reporting standards for AI-based risk systems will require doctrinal analysis as binding instruments emerge to replace the current consultation paper framework92. Collectively, these research directions have the potential to strengthen the legal and institutional foundations of predictive corporate governance by ensuring that AI-enabled risk detection evolves within a transparent, accountable, and contextsensitive regulatory framework suited to India's corporate governance landscape. VII.

Comparative Perspectives on AI-Enabled Corporate Governance and Early Warning Systems Comparative regulatory developments demonstrate an emerging international consensus that effective AI-enabled corporate governance depends not upon technological sophistication alone, but upon embedding predictive systems within legal frameworks that preserve accountability, transparency, and institutional oversight. Although jurisdictions have adopted different regulatory techniques, they converge in recognising that artificial intelligence should enhance supervisory capacity through continuous monitoring and earlier risk detection without 89 The Digital Personal Data Protection Act, No. 22 of 2023, Acts of Parliament, 2023 (India); Ministry of Electronics and Information Technology, supra note 13.

90 Shikha Bagai, supra note 9.

91 José-Miguel Bello Y Villarino & Simon Bronitt, supra note 8.

92 SEBI, supra note 11; SEBI, supra note 12.

displacing human judgment or existing governance institutions93. This convergence reinforces the central argument advanced throughout this paper that predictive governance represents an evolutionary extension of compliance-based regulation rather than its replacement. The European Union has adopted perhaps the most comprehensive regulatory approach by integrating AI governance within a broader framework of trustworthy and risk-based regulation. Rather than treating AI merely as a technological innovation, the European model emphasises proportionality, explainability, transparency, and human oversight as legal preconditions for deploying algorithmic systems in sectors capable of affecting economic and public interests94.

This orientation reflects an understanding that predictive technologies acquire legitimacy only where their operation remains subject to meaningful regulatory supervision and accountability. Similarly, the United Kingdom's evolving approach to AIenabled financial supervision favors regulatory innovation through principles-based oversight, encouraging responsible experimentation while preserving supervisory discretion and institutional accountability95. Singapore's governance framework likewise illustrates how financial regulators increasingly integrate AI into supervisory and compliance processes through structured governance expectations centered upon fairness, explainability, risk management, and human oversight rather than unrestricted technological automation96. Despite institutional differences, these approaches reveal striking areas of convergence.

Across jurisdictions, AI-assisted governance is increasingly accompanied by requirements relating to algorithmic explainability, independent validation, continuous monitoring, auditability, and clearly assigned managerial responsibility for automated decision-making97. These safeguards 93 Regulation (EU) 2024/1689 of the European Parliament and of the Council of 13 June 2024 Laying Down Harmonised Rules on Artificial Intelligence (Artificial Intelligence Act), pmbl. Art. 6, 9, 13, 14. https://eurlex. europa. eu/legal-content/EN/TXT/PDF/? uri=OJ:L_202401689 94 Regulation (EU) 2024/1689 of the European Parliament and of the Council of 13 June 2024 Laying Down Harmonised Rules on Artificial Intelligence (Artificial Intelligence Act), pmbl. arts. 14–17. https://eurlex. europa. eu/legal-content/EN/TXT/PDF/? uri=OJ:L_202401689 95 Financial Conduct Authority, AI Update (2023), https://www. fca.

org. uk/publication/corporate/ai-update. pdf ; U. K. Department for Science, Innovation and Technology, A Pro-Innovation Approach to AI Regulation: Government Response to Consultation (2024).

https://assets.publishing.service.gov.uk/media/64cb71a547915a00142a91c4/a-pro-innovation-approach-to-airegulation-amended-web-ready.pdf 96 Monetary Authority of Singapore, Principles to Promote Fairness, Ethics, Accountability and Transparency (FEAT) in the Use of Artificial Intelligence and Data Analytics in Singapore's Financial Sector (2018), https://www.mas.gov.sg/~/media/MAS/News%20and%20Publications/Monographs%20and%20Information%2 0Papers/FEAT%20Principles%20Final.pdf

97 Veritas Consortium, FEAT Principles Assessment Methodology (Veritas Document 3, Phase Two),

https://www.mas.gov.sg/-/media/mas-media-library/news/media-releases/2022/veritas-document-3---featprinciples-assessment-methodology.pdf

recognise that predictive systems generate governance value only when algorithmic outputs remain understandable, contestable, and capable of regulatory verification. Equally significant is the consistent insistence that AI should augment rather than substitute human decisionmaking, thereby preserving legal accountability even where risk identification becomes increasingly data-driven98. India's emerging regulatory framework reflects many of these developing international principles. SEBI's Consultation Paper on Responsible Usage of AI in Indian Securities Markets proposes governance measures including independent AI audits, periodic accuracy assessments, senior management accountability, and human-in-the-loop supervision, while the subsequent AI Advisory strengthens expectations of continuous monitoring through AIenabled security operations and coordinated supervisory infrastructure.

99 These initiatives are complemented by the India AI Governance Guidelines and NITI Aayog's Responsible AI framework, both of which emphasise fairness, transparency, accountability, explainability, and responsible innovation as foundational principles for AI deployment100. Simultaneously, the Digital Personal Data Protection Act, 2023 introduces safeguards relating to lawful processing, consent, and purpose limitation that inevitably shape the permissible operation of large-scale AI-enabled governance systems101. Nevertheless, important distinctions remain. Whereas certain comparative frameworks have progressed towards more structured regulatory obligations governing algorithmic accountability and risk classification, India's present approach remains predominantly policydriven and consultative.

Existing initiatives establish important normative foundations but leave unresolved several operational questions concerning standardised AI auditing methodologies, legally enforceable explainability requirements, and consistent supervisory standards across regulated sectors102. Consequently, India's framework presently demonstrates substantial normative alignment with emerging international governance standards while remaining at an earlier stage of institutional implementation. The comparative experience therefore strengthens, rather than alters, the reform proposals advanced in this paper. International practice suggests that successful predictive governance

98 Regulation (EU) 2024/1689 (Artificial Intelligence Act), pmbl. ¶¶ 89–107.

99 SEBI, supra note 11; SEBI, supra note 12.

100 Ministry of Electronics and Information Technology, supra note 13.; NITI Aayog, Responsible AI for All.

101 Digital Personal Data Protection Act, No. 22 of 2023 (India).

102 U.K. Department for Science, Innovation and Technology, supra note 95.

depends not upon replacing established compliance mechanisms with automated surveillance, but upon integrating AI-enabled Early Warning Systems within transparent regulatory structures characterised by accountability, continuous oversight, and meaningful human supervision. India's recent regulatory initiatives indicate movement in this direction, although further institutional development will be necessary before predictive governance can realise its full potential as a complement to the country's existing corporate governance architecture103. VIII.

Conclusion The argument developed in this paper converges on a diagnosis that is simultaneously troubling and hopeful. India's corporate governance framework has achieved genuine improvements in formal regulatory sophistication over two decades of reform. The Companies Act, 2013, and the SEBI LODR Regulations together constitute a credible institutional architecture for mandating disclosure, structuring board accountability, and establishing audit oversight104. These reforms have produced measurable improvements in governance quality among India's listed companies, while empirical evidence indicates that stronger governance standards are associated with improved market performance and enhanced investor confidence105.

Yet the persistence of large-scale governance failures Satyam, YES Bank, IL&FS, and others across different sectors and regulatory contexts demonstrates with uncomfortable clarity that compliance-oriented governance is structurally insufficient as a risk detection mechanism106. The cases share a common architecture of failure: governance deterioration that accumulated over extended periods, external safeguards that functioned as periodic checkpoints rather than continuous monitors, and regulatory intervention that arrived after rather than before visible collapse. The distinction between legal compliance and effective risk governance is not merely academic it carries material consequences for investors, creditors, employees, and the broader financial system. Predictive governance, supported by AI-enabled Early Warning Systems, offers a meaningful response to this structural inadequacy.

Machine learning models, continuous financial

103 SEBI, supra note 12; Ministry of Electronics and Information Technology, supra note 13.

104 The Companies Act, No. 18 of 2013, Acts of Parliament, 2013 (India); Securities and Exchange Board of India, Securities and Exchange Board of India (Listing Obligations and Disclosure Requirements) Regulations, 2015.

105 Jayati Sarkar, Subrata Sarkar & Kaustav Sen, supra note 17.

106 Madan Lal Bhasin, supra note 4; Kushi Singh & Shaswat Kumar Chandan, supra note 5; Dr. Anjali Arora, supra note 6.

surveillance, and AI-assisted regulatory monitoring have the potential to identify precursor signals of governance deterioration at stages where timely intervention remains both feasible and effective107. SEBI's recent regulatory initiatives the 2025 AI Consultation Paper and the

2026 advisory on AI-enabled vulnerability detection signal institutional recognition that

supervisory capacity must evolve alongside technological capability108. The emerging AI governance frameworks at the national level, including the India AI Governance Guidelines, provide a policy foundation for embedding accountability, transparency, and human oversight requirements into AI deployment across regulatory contexts109. What must be resisted, however, is the temptation to treat AI-enabled EWS as a governance solution in themselves. Monitoring capacity and governance accountability are related but distinct the former is a prerequisite for the latter, but it cannot substitute for it. An AI system that accurately identifies governance risk creates value only within an institutional framework capable of translating that risk signal into timely, proportionate, and accountable regulatory response.

Building that institutional capacity strengthening enforcement, developing regulatory expertise, clarifying accountability frameworks, and ensuring explainability of algorithmic governance tools is the deeper reform challenge that India faces. The future of predictive corporate governance in India will therefore depend not only on the adoption of advanced technologies, but equally on the development of transparent institutions, accountable regulatory practices, and governance frameworks capable of ensuring that technological innovation strengthens, rather than supplants, corporate accountability.

107 José-Miguel Bello Y Villarino & Simon Bronitt, supra note 8; Shikha Bagai, supra note 9.

108 SEBI, supra note 11; SEBI, supra note 12.

109 Ministry of Electronics and Information Technology, supra note 13.