Tag: third-party risk

For EU-regulated firms, managing technology risk is no longer just sound practice. Under DORA, NIS2 and ISO 27001, it is a legal or contractual...

Due diligence questionnaires exist to help firms assess the risks tied to counterparties, service providers and other third parties. But completing one is only...

The Committee on Payments and Market Infrastructures (CPMI) and the International Organization of Securities Commissions (IOSCO have jointly issued two new publications addressing resilience...

Continuous compliance is often confused with continuous control monitoring, but the two are not the same thing, and the difference is costing firms visibility...

Artificial intelligence is no longer limited to automating simple, repetitive compliance and risk tasks. Across financial services, firms are increasingly using AI to conduct...

Financial regulators across the US, UK and UAE are converging on a single message: firms do not need to wait for AI-specific rules before...

Financial institutions are under growing pressure to do more than simply flag suspicious activity. Regulators now expect firms to prove, document and defend every...

Risk managers across New York, Chicago and San Francisco are discovering that Europe's operational resilience regime has quietly become their problem too. According to Risk...

Financial services firms are becoming larger, more complex and increasingly interconnected, but that does not necessarily mean their compliance technology should follow the same...

Compliance leaders at buy-side firms are confronting a stark reality: the old playbook for scaling their functions no longer works. According to ACA Group, for...