Risk & Resilience

EU Clarifies When Phishing Triggers DORA Incident Reporting

Phishing attacks are a daily reality for banks and their customers alike. But under the EU’s Digital Operational Resilience Act, not every phishing email belongs in a regulator’s incident inbox. That distinction is now clearer following a formal question from Germany’s financial supervisor, BaFin.

Swedish Regulator Says Banks Need to Sharpen Operational Risk Management

Banks and credit market companies in Sweden have largely effective processes for managing operational risk, but there is still significant room for improvement, according to a new in-depth analysis published Thursday by the Swedish Financial Supervisory Authority.

Risk & Decision-Making

In this article, Norman Marks reflects on a recent exchange sparked by Alex Sidorenko’s thinking on risk and decision-making, exploring where they strongly align and where a critical distinction emerges around the concept of uncertainty. While agreeing that risk management should move beyond static risk lists and toward enabling better decisions, Marks challenges how the term “uncertainty” is often understood and applied in practice. The result is a pragmatic reframing of risk conversations—one grounded in real managerial decision-making rather than abstract definitions or theoretical precision.

Risk Was Never Meant to Be a Compliance Exercise

In my earlier piece, Risk Management Is Not a SOX Coloring Book: A Call for Risk Management as a Strategic Discipline, I argued that decades of Sarbanes-Oxley gravity have quietly reshaped how organizations understand risk—narrowing it into a compliance exercise defined by documentation, evidence trails, and audit satisfaction. That article challenged the idea that shaded boxes and completed control matrices equate to managing uncertainty. This follow-up goes a step further. It explores what risk management looks like once we finally put the coloring book down.

Climate Risks Are Shifting Across Portugal’s Insurance & Pension Sectors

The Portuguese Insurance and Pension Funds Supervisory Authority (ASF) has released the third edition of its Annual Report on Climate Risk Exposure, offering a grounded look at how climate transition and physical risks are shaping Portugal’s insurance and pension fund sectors. Developed throughout 2025 with data referenced to year-end 2024, the report shows that investment portfolios are gradually aligning with the climate transition, while the value of assets exposed to floods and wildfires continues to rise.

The Influence of Viral Misinformation on Brand Reputation

In the digital age, brand reputation is more vulnerable than ever. Viral misinformation—false or misleading information rapidly spread via social media, news outlets, or messaging platforms—poses a significant threat to companies of all sizes and industries. Even unintentional misrepresentations can erode consumer trust, trigger regulatory scrutiny, and lead to long-term financial and reputational damage. Brands that fail to monitor, anticipate, and respond to misinformation risk amplified negative impacts. This report examines the mechanisms of viral misinformation, its impact on brand perception, and strategies to protect corporate reputation in 2025 and beyond.

Stability Holds for European Insurers as Global Tensions Complicate the Picture

Europe’s insurance sector is proving resilient in an increasingly unsettled world but the clouds are not lifting. According to the January 2026 Insurance Risk Dashboard published on Thursday by European Insurance and Occupational Pensions Authority, overall risks in the European insurance market remain stable at a medium level, even as persistent geopolitical tensions continue to weigh on the broader economic and market outlook.