In-depth coverage of AI governance, model risk management, and regulatory compliance for enterprise teams.
Risk Assessment & AnalysisNIST released the AI Risk Management Framework 1.0 in January 2023, fulfilling a mandate from the National Artificial Intelligence Initiative Act of 2020. This isn t just another document to file away
Risk Assessment & AnalysisWhat Happened In January 2025, South Africa s High Court declared the automated vetting system for the Social Relief of Distress grant unconstitutional. This system, which transitioned to fully digita
Risk Assessment & AnalysisThese questions landed in my inbox after the last MRM quarterly review. Your team s probably asking the same ones. The CECL framework replaced incurred loss accounting with a forward-looking expected
Risk Assessment & AnalysisThe Conventional Wisdom The idea is tempting: as countries develop sovereign AI capabilities, your team should align governance frameworks with national strategies, treat international AI collaboratio
Get weekly security insights and compliance updates delivered to your inbox.
Risk Assessment & AnalysisEconomic uncertainty doesn t just alter your loss forecasts. It reveals every shortcut you took when building your Current Expected Credit Losses (CECL) model three years ago during stable conditions.
Risk Assessment & AnalysisYou re building an AI risk framework while your peers are doing the same, yet you re arriving at completely different conclusions. One bank treats a customer service chatbot as high-risk, requiring fu
Risk Assessment & AnalysisThe Problem: Why This Matters Now Your institution is receiving GenAI proposals from every business line. Marketing wants customer communication tools. Wealth management wants portfolio summarization.
Risk Assessment & AnalysisWhen your financial institution deploys AI to detect failing banks, you re not just adding another model to your inventory. You re introducing a system with unique failure modes, data dependencies, an
Risk Assessment & AnalysisThe Challenge Imagine a scenario that s becoming all too common: A Chief Risk Officer (CRO) realizes their risk framework can t catch AI-specific failures. The model inventory misses foundation model
Risk Assessment & AnalysisAI risk is climbing the ranks of operational risks, now sitting at fifth place for 2026. If your team still treats AI as just a subset of IT or model risk, you re missing a key integration point: your
Risk Assessment & AnalysisYour organization s operational risk taxonomy was built for a different era. If you re still mapping AI incidents to categories designed for manual processes and traditional IT systems, you re forcing
Risk Assessment & AnalysisIdentifying the Problem In governance working sessions over the past six months, a recurring issue has emerged. Teams map AI systems to risk tiers, document controls in their ISO/IEC 42001 AIMS, and c
Risk Assessment & AnalysisRecent discussions on operational risk benchmarking reveal a critical issue: banks are divided on whether AI risk should have its own category or be part of existing frameworks. This decision impacts
Risk Assessment & AnalysisUnderstanding Second-Line AI Oversight For the past year, I ve been answering questions from governance leaders about second-line AI oversight. They re trying to determine what their risk, compliance,
Risk Assessment & AnalysisYour credit risk model just flagged a loan applicant based on employment data that doesn t exist. Your compliance AI cited a regulation that was never enacted. Your fraud detection system invented tra
Risk Assessment & AnalysisNearly 200 economists and technology leaders have signed a letter warning that AI could trigger an economic transformation larger than the Industrial Revolution. The signatories include figures from A
