Information security
AI hack threat forcing banks to review cyber controls
Risk Live: AI lowers barriers to entry for phishing, say firms; more common controls needed
Beware war exclusions in cyber insurance, risk managers told
Risk Live: Experts say policy wording is tightening up following rise in ransomware attacks
Top 10 operational risks for 2024
The biggest op risks for the year ahead, as chosen by senior industry practitioners
Top 10 op risks: AI fears drive cyber risk to record high
External fraud re-enters top 10; change management now a top five concern
Too soon to say good riddance to banks’ public enemy number one
As LockBit plans its comeback, experts say banks need a clear ransomware negotiating playbook
Iosco gears up for ‘intensive work’ on AI regulation
Watchdogs risk ‘falling behind the curve’, secretary-general warns; FSB also working on guidance
Beating the drum on cyber risk: the battle for boardroom attention
Delays patching financial sector vulnerabilities highlight the need for more internal clout for cyber chiefs
Why cyber hack leaves EquiLend down but not out
Users turned to alternative securities lending platforms, but that may not mean lost market share
Citrix Bleed hacks flag IT asset inventory shortfalls
To know what needs urgent patching, global banks first need to know what software they have
EquiLend cyber hack exposes trade reporting dependence
Ransomware attack at securities lending platform disrupts regulatory compliance
Information security: too important to leave to the experts?
Holding a trove of sensitive data, FMIs seek greater safety through shared oversight and smarter reporting
Op Risk Benchmarking, round III: the FMIs
Decade of change has seen exchanges and CCPs grow in size and importance, dragging their management of op risk into the regulatory spotlight
Banks grapple with concentration risk from fourth parties
Risk Live: Third-party vendors are increasingly reliant on the same subcontractors
Regulator warns against ‘happy endings’ for op risk wargames
Risk Live: Bankers say third parties should also be at the table when simulating crisis scenarios
On cyber risk, regionals have no appetite for disruption
Smaller lenders fear outages and other IT bungles, as do regulators. So, what are they doing about it?
Maximum insecurity: banks tool up to meet cyber threat
Lenders confront “existential” threat of data leaks with bigger teams and better controls
FDIC security woes make banks sweat over supervisory data
Fears over confidential reporting after inspection urges regulator to address cyber “weaknesses”
US compliance teams face more intrusive Fed supervision
Regional banks look at enhanced data management to handle growing numbers of MRA notices
New threats, old foibles prompt banks to switch GRC vendors
Op Risk Benchmarking: more than half of participants are reviewing or switching systems
Op risk data: WhatsApp fines keep on coming
Also: ‘Five families’ stock-lending cartel pays up; double hit for Wells Fargo. Data by ORX News
Vendors under new scrutiny in CFTC due diligence push
Planned cyber resilience regime will force dealers to subject “critical” tech vendors to stricter audit