GRC Report Staff

The ECB's 2026 reverse stress test found that banks need stronger risk data aggregation, board-led scenario planning, and more realistic assumptions about crisis management actions. Supervisors identified weak links between capital, liquidity, and operational impacts, as well as overreliance on mitigating measures that may be unavailable when many banks act at once. Compliance teams should expect continued supervisory scrutiny of geopolitical risk and capital planning frameworks.

The UK's Financial Reporting Council has revised two auditing standards governing how auditors consider possible breaches of laws and regulations, replacing a more procedural approach with one that places greater weight on the risks identified during an audit.

Thailand's December review of the SET50 Index will determine which companies must comply first with the country's new sustainability reporting requirements. Those included in the index will be required to disclose information covering 2027 under international standards, with their first reports scheduled for 2028.

The Securities and Exchange Commission has more than 34,000 registered entities within the reach of its examination program. For fiscal year 2027, the agency has identified private credit, investment adviser conflicts, cybersecurity and emerging technologies among the areas where it intends to concentrate its attention.

In a speech at Global FinTech Fest 2026, MAS Managing Director Chia Der Jiun signaled that supervisory focus is on AI governance, agentic AI safeguards, and cyber resilience as AI-enabled threats escalate. The speech points to the pending Guidelines for AI Risk Management, the SAFR framework, and Nexus payments connectivity. Compliance teams should treat these as indicators of upcoming supervisory expectations, even though the speech itself is not binding.

The Norway Financial Supervisory Authority (Finanstilsynet) has published a warning about ambrielle-novairex-fr.com, a site originally blacklisted by France's Autorité des Marchés Financiers (AMF) under its crypto-currency category. Compliance teams should treat the domain as a high-risk, likely fraudulent or unauthorized platform and update screening and customer-protection controls accordingly.

ECB Executive Board member Philip Lane presented the September 2026 staff projections. They show 2026 headline HICP inflation of 3.0% (energy inflation of 9.3%) following an oil price shock tied to a conflict that began in March 2026, with real GDP growth of 1.2% to 1.4% projected for 2026 to 2028. This is a speech, not a rule, so it creates no direct compliance obligations. It does shape the macro assumptions behind stress testing, interest rate risk, credit risk, and capital planning at euro area institutions.