Tag: third-party risk.

For EU-regulated firms, technology risk management is no longer simply good operational practice. It is a legal obligation, and DORA, NIS2 and ISO 27001...

Due diligence questionnaires exist to help firms assess the risks posed by counterparties, service providers and other third parties. The trouble is that a single...

The Committee on Payments and Market Infrastructures (CPMI) and the International Organization of Securities Commissions (IOSCO) have published a new toolkit and a discussion...

Artificial intelligence is no longer limited to automating simple, repetitive compliance and risk tasks. Across financial services, firms are increasingly using AI to conduct...

Financial regulators across the US, UK and UAE are converging on a single message: existing rules already apply to artificial intelligence, and firms cannot...

Financial institutions are under mounting pressure to not only detect financial crime risk but to prove, document, and defend every decision they make under...

The EU's Digital Operational Resilience Act (DORA) has stopped being a purely European concern. Since becoming enforceable on 17 January 2025, the regulation has steadily...

KYND, a cyber risk intelligence provider, has launched Portfolio Analytics, a platform designed to help cyber insurers gain visibility into portfolio-wide exposures and track...

For chief compliance officers, chief operating officers and CTOs at buy-side firms, the question confronting compliance functions has moved beyond simply keeping up with...

The financial sector's growing reliance on technology and third-party providers has long been a double-edged sword. The efficiency gains are real, but so too...