Cyber risk
Review of 2023: A hard road to a soft landing
Banks and regulators were caught in the crosswinds of the fight against inflation
Information security: too important to leave to the experts?
Holding a trove of sensitive data, FMIs seek greater safety through shared oversight and smarter reporting
Op Risk Benchmarking, round III: the FMIs
Decade of change has seen exchanges and CCPs grow in size and importance, dragging their management of op risk into the regulatory spotlight
Banks grapple with concentration risk from fourth parties
Risk Live: Third-party vendors are increasingly reliant on the same subcontractors
On cyber risk, regionals have no appetite for disruption
Smaller lenders fear outages and other IT bungles, as do regulators. So, what are they doing about it?
FDIC security woes make banks sweat over supervisory data
Fears over confidential reporting after inspection urges regulator to address cyber “weaknesses”
US compliance teams face more intrusive Fed supervision
Regional banks look at enhanced data management to handle growing numbers of MRA notices
New threats, old foibles prompt banks to switch GRC vendors
Op Risk Benchmarking: more than half of participants are reviewing or switching systems
Op risk data: WhatsApp fines keep on coming
Also: ‘Five families’ stock-lending cartel pays up; double hit for Wells Fargo. Data by ORX News
Transmission of cyber risk through the Canadian wholesale payment system
The authors investigate how a paralyzing cyber attack on one or more banks would spread to other banks through the Canadian wholesale payment system and simulate various scenarios, evaluating the total disruption to the payment system.
Vendors under new scrutiny in CFTC due diligence push
Planned cyber resilience regime will force dealers to subject “critical” tech vendors to stricter audit
How operational risk managers won a battle and lost a war
Applying op risk capital to US regional banks is positive, but the SMA may not be fit for purpose
Banks call for direct oversight of cloud providers by US regulators
Tri-opoly of cloud vendors “poses systemic risk” to financial sector, say risk managers
Eurex wargames pricing derivatives during disruption events
Ukraine war and tech glitches prompt German exchange to set out methods for handling market closures
Sizing cyber: banks split on who owns and measures hack threats
G-Sibs split on risk modelling and management for IT disruption and infosec
Op Risk Benchmarking: Inside the G-Sibs
New initiative scrutinises op risk measurement and management practices at the world’s largest banks
Banks frequently breach appetite for top op risks
Op Risk Benchmarking: Five G-Sibs breached appetite in past year across four risk types, new research reveals
Citi cyber chief says AI providing new weapons in hacking wars
Barron-DiCamillo also urges regulators to work with industry best practice, not against it
Banks’ internal watchdogs bark back at ChatGPT
Generative AI has plenty of uses in finance, but banks must first overcome compliance headaches
Futures industry must hone comms after Ion hack
Operational resilience hinges on maintaining communication channels in a cyber outage
Dora ‘critical tech vendor’ designation could cast a wide net
Experts think cloud services, data providers and software firms are all in regulators’ sights
FMIs pose greatest challenge for operational resilience tests
Risk Live: Calls for large-scale industry exercises to plan what happens if major CCPs go down
Cyber risk definition and classification for financial risk management
The authors put forward a definition and classification scheme for cyber risk than can be used as a template for data collection by financial institutions.
Compliance can help fintechs grow from adolescence to adulthood
It may slow US banking down, but customer safety is the difference between success and failure