CATEGORY
DORA, EU AI Act, NIST standards, third-party risk — the supervisory pressure shaping technology decisions.
APPLIED AI
A question that stayed open after the one person who might have answered it died in 2023 had a mundane answer: a 1990s random number generator initialised from the clock. The authors say that answer makes them more...
APPLIED AI
Financial services has spent 20 to 25 years treating modernisation as a project with an end date. Opening the Oracle Financial Services Summit in London, Dr. Leda Glyptis argued that the industry's weaker record is...
APPLIED AI
Deploying autonomous physical machines alongside human workforces introduces acute psychological and legal hazards that pure software never encountered. At the Economist Enterprise Physical AI and Robotics Summit, leaders from Kier Group and the British Standards Institution (BSI) established the governance blueprint for physical AI.
INFRASTRUCTURE & CRYPTOGRAPHY
Cloudflare has relied on 16 partner public CAs for years without ever issuing a publicly trusted certificate itself. It now intends to become one, and the interesting part is the design: classic certificates and...
POLICY & RESILIENCE
Supervisors have spent two years reading exit plans that assume an exit nobody has priced, budgeted or rehearsed. In January the most durable excuse for that stops being available.
POLICY & RESILIENCE
Financial entities learned to answer the NIS2 question with one sentence about DORA. That sentence is correct, and it is about to be applied to a regulation it was never written for.
APPLIED AI
Relief on the high-risk file arrived nine days ago. The risk now is that banks read one deferral and stand down a programme that still has an obligation biting today.
APPLIED AI
Fifteen years of model risk doctrine was rewritten in April, and the one paragraph that will matter most to a 2026 risk committee is the one that says which models the guidance does not cover.
INFRASTRUCTURE & CRYPTOGRAPHY
Most banks have costed the test. Fewer have costed the supply chain it now depends on: an accredited tester market on a synchronised three-year clock, and threat intelligence that must come from outside every single time.
INFRASTRUCTURE & CRYPTOGRAPHY
Every post-quantum roadmap assumes an inventory that does not exist. The asset register knows the server, the owner and the criticality; it does not know the algorithm, the key length, the library or the expiry.
APPLIED AI
Immutable is not the same as trusted. As instant settlement and probabilistic AI reshape banking, the uncertified ledger becomes the weak link, and a certifiable blockchain becomes the audit spine.
APPLIED AI
Payments are now the core of bank technology strategy. This is the operating model, risk frontier and revenue playbook G-SIBs need to lead the agentic, real-time cycle.
