APPLIED AI
Your High-Risk Deadline Moved to December 2027. Your Chatbot's Did Not.
Relief on the high-risk file arrived nine days ago. The risk now is that banks read one deferral and stand down a programme that still has an obligation biting today.
CATEGORY
Policy & resilience
DORA, EU AI Act, NIST standards, third-party risk — the supervisory pressure shaping technology decisions.
Tags in this category
Recent articles in Policy & resilience
APPLIED AI
Out of Scope Is Not Out of Risk: The 2026 Model-Risk Rewrite Left Out the Models Banks Are Actually Deploying
Fifteen years of model risk doctrine was rewritten in April, and the one paragraph that will matter most to a 2026 risk committee is the one that says which models the guidance does not cover.
INFRASTRUCTURE & CRYPTOGRAPHY
The Red Team Became a Supervised Supply Chain: What DORA's TLPT Regime Actually Demands
Most banks have costed the test. Fewer have costed the supply chain it now depends on: an accredited tester market on a synchronised three-year clock, and threat intelligence that must come from outside every single time.
INFRASTRUCTURE & CRYPTOGRAPHY
You Cannot Migrate What You Cannot Enumerate: The Cryptographic Bill of Materials Banks Still Do Not Have
Every post-quantum roadmap assumes an inventory that does not exist. The asset register knows the server, the owner and the criticality; it does not know the algorithm, the key length, the library or the expiry.
APPLIED AI
From Evidence to Truth: Why Certified Blockchains Will Define the Next Era of Banking Trust
Immutable is not the same as trusted. As instant settlement and probabilistic AI reshape banking, the uncertified ledger becomes the weak link, and a certifiable blockchain becomes the audit spine.
APPLIED AI
The 2026 Global Payments Outlook: Operating Model, Risk, and Revenue in an Agentic, Invisible, Real-Time World
Payments are now the core of bank technology strategy. This is the operating model, risk frontier and revenue playbook G-SIBs need to lead the agentic, real-time cycle.
POLICY & RESILIENCE
Static Site Generator (SSG): Enterprise-Grade Strategic Deep Dive and Architectural Roadmap
Compile-time WCAG gates, SHA-384 SRI, CSP injection and a local-first LLM pipeline set this Rust engine apart, but incremental builds, native minification and AVIF are still aspirational. Here is the honest gap analysis and the road to 1.0.
APPLIED AI
From Fragmentation to Fault Line: Corporate Banking's Missing API Standard in the Agentic Era
Retail banking got its API standard a decade ago. Corporate banking never did — and now that AI agents and the Model Context Protocol have turned integration into a runtime decision, the gap has stopped being a nuisance and become a fault line. A concrete failure mode, the strategic choice it forces, and what a corporate banking API standard has to mandate.
INFRASTRUCTURE & CRYPTOGRAPHY
From Evidence to Truth: Why Certified Blockchains Will Define the Next Era of Banking Trust
Immutability is not institutional trust. The 2026 Certified Blockchain Index scores ledger governance, consensus integrity, cryptography, smart-contract assurance and audit observability on a 0–5 CMM, mapped to DORA, CPMI-IOSCO PFMI, ISO/IEC TC 307 and Basel III — turning engineering metrics into board-auditable financial truth.
APPLIED AI
The Agentic AI Index for Banks in 2026: Measuring Autonomy
Agentic AI is operational infrastructure in 2026. This index measures it the way banks measure capital and credit: a six-dimension readiness score across autonomy tiers, the control plane, regulatory evidence, unit economics, organisational readiness, and global regulatory alignment.
INFRASTRUCTURE & CRYPTOGRAPHY
The 2026 Post-Quantum Security Scorecard: A Board-Level Metric Framework
As of June 2026, post-quantum cryptography (PQC) has transitioned from an experimental technical concern to a primary fiduciary obligation. Boards must now oversee the systematic migration of legacy encryption...
PAYMENTS & MONEY
Open Source, FINOS and the Cloud-Native CIB Stack
Morgan Stanley, JPMorgan and Citi are doubling down on FINOS and the Linux Foundation. A Rust-and-zero-dependency stack — noyalib, http-handle, hsh, KyberLib — shows what the cloud-native CIB stack looks like in 2026 under PSD3, FiDA and DORA.