Blog

Digital Resilience in the US: SEC amendments follow EU counterparts

The U.S. SEC has published proposed amendments that will expand and update Regulation SCI to focus more on the evolving landscape of digital resilience.

U.S. National Cybersecurity Strategy reignites conversation around liability for failure

The White House has published its long-awaited National Cybersecurity Strategy, which creates five key collaborative pillars for effective cybersecurity in the U.S.

ECB announces stress test on cyber resilience

The European Central Bank has expressed concern about outsourcing risks, and launched a thematic stress test on cyber resilience.

Putting the AI in compliance: ChatGPT and FTC warnings

Developments in artificial intelligence have never been more prominent, but what are the compliance implications for fast-evolving AI?

DOJ unveils “significant change” in ECCP approach to communication platforms

“Significant changes” have been made to the DOJ's ECCP (Evaluation of Corporate Compliance Programs) with a focus on the use of personal devices.

Illicit communications and where to find them

Regulators are tightening their net to catch firms who fail to prevent the use of illicit communications. We look at where off-channel communication channels are hiding, and how to find them.

Eyes on the prize for the FCA’s new Consumer Duty

The FCA’s Sheldon Mills has set out key steps in the final stages of implementation for the new Consumer Duty, as well as reminding firms about the ultimate benefits of the rule.

Remuneration reduction: the solution for illicit comms?

As more financial institutions act to dock the remuneration of employees who use off-channel communications, we look at whether pay reduction is a long-term fix.

‘The most insidious risk of all is the risk of complacency’ – OSFI

Canadian Regulator, OSFI, has announced that it will base its strategy “on a bias towards action". Will this change expectations for firms?

Increased scrutiny for outsourcing: an overview of regulatory directives

As financial services rely more on outsourcing, regulators are acting - fast. We take stock of new and emerging regulatory requirements when outsourcing.

Are your third parties operationally resilient? Key considerations for UK firms

As third-party vendors slowly become the backbone of the operation of financial services, there’s increasing focus on the operational resilience of those third parties. We set out 5 considerations that should be top of mind.