POLICY & RESILIENCE
你的 DORA 退出計畫只是算了價，沒有做規劃。一月，這個價格就消失了。
Supervisors have spent two years reading exit plans that assume an exit nobody has priced, budgeted or rehearsed. In January the most durable excuse for that stops being available.
FEED
Articles
POLICY & RESILIENCE
DORA 讓你躲過了 NIS2，卻躲不過 CRA。
Financial entities learned to answer the NIS2 question with one sentence about DORA. That sentence is correct, and it is about to be applied to a regulation it was never written for.
APPLIED AI
你的高風險期限挪到了2027年12月。你的聊天機器人沒有。
Relief on the high-risk file arrived nine days ago. The risk now is that banks read one deferral and stand down a programme that still has an obligation biting today.
PAYMENTS & MONEY
錢包 12 月上線。銀行一年後必須接受。
For a decade banks have owned the login. eIDAS 2 turns identity into something the customer carries and the bank is obliged to accept on request.
PAYMENTS & MONEY
PSD2 要銀行蓋一組 API。FiDA 要銀行加入一個市場。
Under PSD2 a bank could comply alone: build the endpoint, publish the spec, done. FiDA has no unilateral path. Compliance runs through a scheme, and the scheme is being designed right now.
APPLIED AI
不在適用範圍內,不等於沒有風險:2026 年模型風險改寫漏掉了銀行真正在部署的模型
Fifteen years of model risk doctrine was rewritten in April, and the one paragraph that will matter most to a 2026 risk committee is the one that says which models the guidance does not cover.
INFRA & CRYPTOGRAPHY
紅隊已成受監理的供應鏈:DORA TLPT 制度的實際要求
Most banks have costed the test. Fewer have costed the supply chain it now depends on: an accredited tester market on a synchronised three-year clock, and threat intelligence that must come from outside every single time.
INFRA & CRYPTOGRAPHY
無法列舉就無法遷移：銀行至今沒有的那份密碼物料清單
Every post-quantum roadmap assumes an inventory that does not exist. The asset register knows the server, the owner and the criticality; it does not know the algorithm, the key length, the library or the expiry.
PAYMENTS & MONEY
收款人驗證上線實戰：近似相符、批次檔案與未定價的責任
Payee verification stopped being a competitive feature the day it became a legal obligation. What remains is an operations problem: a five-second budget, an ambiguous middle answer, and corporate files that must be taken apart before they can be checked.
APPLIED AI
從證據到真實：為何認證區塊鏈將定義銀行信任的下一個時代
Immutable is not the same as trusted. As instant settlement and probabilistic AI reshape banking, the uncertified ledger becomes the weak link, and a certifiable blockchain becomes the audit spine.
APPLIED AI
2026 全球支付展望：代理型、隱形化、即時化世界中的營運模式、風險與營收
Payments are now the core of bank technology strategy. This is the operating model, risk frontier and revenue playbook G-SIBs need to lead the agentic, real-time cycle.
POLICY & RESILIENCE
靜態網站產生器（SSG）：企業級策略深度剖析與架構藍圖
Compile-time WCAG gates, SHA-384 SRI, CSP injection and a local-first LLM pipeline set this Rust engine apart, but incremental builds, native minification and AVIF are still aspirational. Here is the honest gap analysis and the road to 1.0.
PAYMENTS & MONEY
從訊息到地圖：在 ISO 20022 與 SWIFT 之上建立全球企業標準
The industry finally has a global language for payments. It still does not have a global map for corporates to act on it. ISO 20022 and Swift's CBPR+ harmonised what a payment must say, not how a corporate uses it — the missing interface and behaviour layers, and how banks can build a global corporate standard on the rails they already have.
APPLIED AI
從碎裂到斷層：智能體時代裡企業銀行缺席的那套 API 標準
Retail banking got its API standard a decade ago. Corporate banking never did — and now that AI agents and the Model Context Protocol have turned integration into a runtime decision, the gap has stopped being a nuisance and become a fault line. A concrete failure mode, the strategic choice it forces, and what a corporate banking API standard has to mandate.
APPLIED AI
Reading the Emerging-Technology Risk Horizon for Banks in 2026
Regulators have started scanning the horizon out loud. Reading the 2026 emerging-technology landscape for banks across three converging vectors — personalised AI intelligence, synthetic financial crime, and programmable finance — and a framework for turning weak signals into supervisory action before harm scales.
INFRA & CRYPTOGRAPHY
從證據到真實：為何認證區塊鏈將定義銀行信任的下一個時代
Immutability is not institutional trust. The 2026 Certified Blockchain Index scores ledger governance, consensus integrity, cryptography, smart-contract assurance and audit observability on a 0–5 CMM, mapped to DORA, CPMI-IOSCO PFMI, ISO/IEC TC 307 and Basel III — turning engineering metrics into board-auditable financial truth.
APPLIED AI
2026 年銀行智能體 AI 指數：衡量自主性
Agentic AI is operational infrastructure in 2026. This index measures it the way banks measure capital and credit: a six-dimension readiness score across autonomy tiers, the control plane, regulatory evidence, unit economics, organisational readiness, and global regulatory alignment.
INFRA & CRYPTOGRAPHY
2026 後量子安全計分卡:董事會層級的指標框架
As of June 2026, post-quantum cryptography (PQC) has transitioned from an experimental technical concern to a primary fiduciary obligation. Boards must now oversee the systematic migration of legacy encryption...
PAYMENTS & MONEY
開源、FINOS 與雲端原生 CIB 堆疊
Morgan Stanley, JPMorgan and Citi are doubling down on FINOS and the Linux Foundation. A Rust-and-zero-dependency stack — noyalib, http-handle, hsh, KyberLib — shows what the cloud-native CIB stack looks like in 2026 under PSD3, FiDA and DORA.
APPLIED AI
2026 代理式財資:從《自主財資指數》到正式環境級副駕駛
Agentic treasury co-pilots are moving from controlled pilots into production in 2026. The pattern is consistent across CIB treasuries: agents read ISO 20022 cash data, call bounded tools, and rebalance liquidity inside policy bands — with SR 11-7, DORA, and EU AI Act controls wrapped around them.
PAYMENTS & MONEY
持續不停機 CIB:網路復原、備援軌道與量子安全財務管理
Corporate and investment banks now treat cyber recovery, ISO 20022 fallback rails across RTGS, instant and tokenised networks, and quantum-safe treasury controls as one always-on operating model — the board-grade response to DORA Articles 5 and 6, FHE, QKD and PQC primitives, and ICT third-party concentration risk.
PAYMENTS & MONEY
2026 年的後量子銀行韌性指數:EO 14409、全球大限與受託的密碼敏捷性
Executive Order 14409, ANSSI's hard 2030 deadline and DORA Article 5 have moved post-quantum cryptography from a long-range technical goal to an active regulatory mandate. This index converts securing registries, high-frequency ledgers and SWIFT channels into a board-ready 0–5 scorecard that aligns ML-KEM, ML-DSA and SLH-DSA primitives with fiduciary liability and balance-sheet risk.
PAYMENTS & MONEY
2026 全球支付展望：代理型、隱形化、即時化世界中的營運模式、風險與營收
The 2026 global payments cycle is defined by three converging forces — agentic commerce, invisible embedded payments, and real-time execution — sitting on top of a tokenised unified ledger under Project Agorá and a hard November 2026 SWIFT structured-address cut-over. This piece synthesises the J.P. Morgan, Global Payments, HSBC and Payments Association 2026 outlooks into a four-pillar G-SIB operating model.
INFRA & CRYPTOGRAPHY
CIB 的量子曙光:從 KyberLib 到量子韌性支付堆疊
BIS Quantum Dawn and the G7 January 2026 PQC roadmap have moved post-quantum cryptography from research to board agenda. This piece extends KyberLib from a toolkit into an enterprise CIB transition programme — covering high-value rails, trade finance, custody, and the disclosures regulators are now asking for.
No articles match the current filters.