Risk & Resilience

Spain Moves to Demystify DORA With 74-Question Industry Guide

Spain’s securities regulator, the Comisión Nacional del Mercado de Valores, has recently published a detailed set of 74 frequently asked questions aimed at helping financial firms interpret and apply the EU’s Digital Operational Resilience Act.

Sanctions Controls Under Strain as Finland’s Regulator Targets Payment Providers

In a recent supervision release, Sweden's Financial Supervisory Authority (FIN-FSA) published a summary of its updated sanctions risk assessment covering sectors supervised under the Anti-Money Laundering Act. The previous summary was issued in autumn 2024.

Hong Kong Banks Enter 2026 on Solid Footing as HKMA Zeroes In on Resilience, Fraud & AI

Hong Kong’s banking sector closed 2025 in a position of strength, according to the Hong Kong Monetary Authority’s year-end review. Capital and liquidity buffers remained robust, credit risks were described as manageable, and supervisory work over the past year focused heavily on operational resilience, fraud prevention and technology risk.

GRC Report Announces Partnership With Risk-!n 2026 Conference

The GRC Report has announced a new partnership with the Risk-!n 2026 conference, aligning one of the fastest-growing governance, risk, and compliance media platforms with a cross-industry gathering focused on risk management, resilience, and decision-making.

Bank of England Embeds Climate Risk Into Core Monetary & Financial Stability Framework

Climate risk is no longer a theoretical overlay in central banking. It is becoming embedded in the day-to-day mechanics of monetary policy, supervision and financial stability. That is what James Talbot, Executive Director for International at the Bank of England, said while speaking at the London School of Economics. Talbot, who also chairs the monetary policy work-stream at the Network for Greening the Financial System, set out how the Bank is integrating climate considerations across its core objectives.

EU Clarifies When Phishing Triggers DORA Incident Reporting

Phishing attacks are a daily reality for banks and their customers alike. But under the EU’s Digital Operational Resilience Act, not every phishing email belongs in a regulator’s incident inbox. That distinction is now clearer following a formal question from Germany’s financial supervisor, BaFin.

Swedish Regulator Says Banks Need to Sharpen Operational Risk Management

Banks and credit market companies in Sweden have largely effective processes for managing operational risk, but there is still significant room for improvement, according to a new in-depth analysis published Thursday by the Swedish Financial Supervisory Authority.