Find the Right GRC Solution

Search and compare GRC technology built for the problems you’re trying to solve

Risk & Resilience

Bundesbank and BaFin to Present 2026 LSI Stress Test Results on September 24

The Bundesbank and BaFin will publicly present the results of the 2026 stress test covering approximately 1,100 Less Significant Institutions (LSIs) in Germany on September 24, 2026, at 11:00 a.m. This is an announcement of a press event, not a new requirement, but the findings will signal supervisory priorities and sector-wide vulnerabilities. Compliance and risk teams at German banks, and at institutions with exposure to them, should prepare to review the results promptly.

EIOPA Outlines Solvency II Capital Relief Expectations and Long-Term Investment Changes for Insurers

EIOPA's Eurofi article explains that the revised Solvency II framework, applicable from January 30, 2027, is expected to release significant capital through a revised risk margin calculation. That release comes with an explicit political expectation that the capital will support productive European investment. Compliance teams should prepare for new capital treatments, closer supervisory monitoring of capital use, and EIOPA's first report by the end of 2028.

FCA Finalizes Rules for UK Cryptoasset Regime Taking Effect October 2027

The FCA has published final rules and guidance for the new UK cryptoasset regulatory regime, which is expected to take effect on 25 October 2027. Cryptoasset firms must be authorized and supervised under FSMA to operate in or to the UK, so compliance teams should begin gap assessments and authorization planning now.

EIOPA Backs Insurer-Led Private Credit Growth but Stresses Proportionate Oversight and Stronger Risk

EIOPA argues that non-bank financial intermediation, especially insurer-held private credit, is necessary to meet EU investment needs. It also warns that growth must come with sound risk management, consistent definitions, and coordinated supervision. This is a thought-leadership article, not a binding rule. Even so, it signals supervisory priorities that insurers and other NBFI-exposed firms should expect to see in future reviews.

ECB Blog Links Low Household Capital Market Participation to Policy Gaps in EU Savings and Investmen

An ECB staff blog finds that about 80% of euro area households hold no market-based financial instruments, and that roughly one-third of household financial assets, nearly EUR $10 Trillion, sits in low-yield deposits. It calls for targeted financial literacy, simple investment products, and swift implementation of savings and investment accounts (SIAs) and pension reforms. The post is not binding, but it signals the direction of EU retail investment policy and the product and conduct expectations firms may face.

UAE Central Bank Puts Cyber Resilience, AI & Governance at Heart of 2027 Regulatory Agenda

The Central Bank of the UAE has put cybersecurity, fraud prevention, corporate governance and emerging technologies on its supervisory agenda for 2027, outlining its priorities during a meeting with the country's banking and insurance executives in Abu Dhabi on Wednesday. The meeting brought together senior central bank officials and chief executives for the UAE Financial Sector Supervisory Roundtable, where discussions ranged from the suitability of financial institution leadership to the growing use of artificial intelligence and digital assets. The gathering also offered a look at the Central Bank of the UAE's (CBUAE) strategy for 2027 through 2029, with operational resilience and closer coordination between supervisors and financial institutions receiving particular attention.

Norway FSA Republishes Warning on Seven Apex Capital Cited by Portugal's CMVM

The Norway Financial Supervisory Authority has listed Seven Apex Capital in a warning that appears to originate from Portugal's securities regulator, the CMVM. Compliance teams should treat the entity as a potential unauthorized or fraudulent investment solicitor and screen for any exposure. The source record is sparse, so the details need independent verification.