APPLIED AI
Your High-Risk Deadline Moved to December 2027. Your Chatbot's Did Not.
Relief on the high-risk file arrived nine days ago. The risk now is that banks read one deferral and stand down a programme that still has an obligation biting today.
CATEGORY
Banking leadership
CTO / CIO concerns — strategic technology decisions, organisational design, original analysis.
Tags in this category
Recent articles in Banking leadership
PAYMENTS & MONEY
The Wallet Ships in December. Banks Must Accept It a Year Later.
For a decade banks have owned the login. eIDAS 2 turns identity into something the customer carries and the bank is obliged to accept on request.
PAYMENTS & MONEY
PSD2 Made Banks Build an API. FiDA Makes Them Join a Market.
Under PSD2 a bank could comply alone: build the endpoint, publish the spec, done. FiDA has no unilateral path. Compliance runs through a scheme, and the scheme is being designed right now.
APPLIED AI
Out of Scope Is Not Out of Risk: The 2026 Model-Risk Rewrite Left Out the Models Banks Are Actually Deploying
Fifteen years of model risk doctrine was rewritten in April, and the one paragraph that will matter most to a 2026 risk committee is the one that says which models the guidance does not cover.
INFRASTRUCTURE & CRYPTOGRAPHY
The Red Team Became a Supervised Supply Chain: What DORA's TLPT Regime Actually Demands
Most banks have costed the test. Fewer have costed the supply chain it now depends on: an accredited tester market on a synchronised three-year clock, and threat intelligence that must come from outside every single time.
INFRASTRUCTURE & CRYPTOGRAPHY
You Cannot Migrate What You Cannot Enumerate: The Cryptographic Bill of Materials Banks Still Do Not Have
Every post-quantum roadmap assumes an inventory that does not exist. The asset register knows the server, the owner and the criticality; it does not know the algorithm, the key length, the library or the expiry.
PAYMENTS & MONEY
Verification of Payee in Production: Nine Months of Close Matches, Bulk Files, and Unpriced Liability
Payee verification stopped being a competitive feature the day it became a legal obligation. What remains is an operations problem: a five-second budget, an ambiguous middle answer, and corporate files that must be taken apart before they can be checked.
APPLIED AI
From Evidence to Truth: Why Certified Blockchains Will Define the Next Era of Banking Trust
Immutable is not the same as trusted. As instant settlement and probabilistic AI reshape banking, the uncertified ledger becomes the weak link, and a certifiable blockchain becomes the audit spine.
APPLIED AI
The Agentic AI Index for Banks in 2026: Measuring Autonomy
Agentic AI is operational infrastructure in 2026. This index measures it the way banks measure capital and credit: a six-dimension readiness score across autonomy tiers, the control plane, regulatory evidence, unit economics, organisational readiness, and global regulatory alignment.
INFRASTRUCTURE & CRYPTOGRAPHY
The 2026 Post-Quantum Security Scorecard: A Board-Level Metric Framework
As of June 2026, post-quantum cryptography (PQC) has transitioned from an experimental technical concern to a primary fiduciary obligation. Boards must now oversee the systematic migration of legacy encryption...
PAYMENTS & MONEY
The Post-Quantum Banking Resilience Index in 2026: EO 14409, Global Deadlines, and Fiduciary Cryptographic Agility
Executive Order 14409, ANSSI's hard 2030 deadline and DORA Article 5 have moved post-quantum cryptography from a long-range technical goal to an active regulatory mandate. This index converts securing registries, high-frequency ledgers and SWIFT channels into a board-ready 0–5 scorecard that aligns ML-KEM, ML-DSA and SLH-DSA primitives with fiduciary liability and balance-sheet risk.
INFRASTRUCTURE & CRYPTOGRAPHY
Quantum Dawn for CIB: From KyberLib to a Quantum-Resilient Payments Stack
BIS Quantum Dawn and the G7 January 2026 PQC roadmap have moved post-quantum cryptography from research to board agenda. This piece extends KyberLib from a toolkit into an enterprise CIB transition programme — covering high-value rails, trade finance, custody, and the disclosures regulators are now asking for.