Financial Services Archives

Best Practices for Securing Cardholder Data in Payment Systems

by Tim Freestone April 5, 2026April 5, 2026 | PCI Compliance

Payment fraud and data breaches continue to impose significant financial and reputational costs on organisations that process, store, or transmit cardholder data. A single compromise can trigger regulatory penalties, operational...

Why DORA Changes Everything for EU Financial Institutions in 2026

by Danielle Barbour April 5, 2026April 5, 2026 | Regulatory Compliance

The Digital Operational Resilience Act represents the most comprehensive operational risk regime ever imposed on the European financial sector. Unlike previous frameworks that treated cybersecurity and operational resilience as separate...

How Netherlands Financial Regulators Interpret Schrems II for Cloud Services

by John Lynch April 5, 2026April 5, 2026 | GDPR Compliance

Financial institutions operating in the Netherlands face unique compliance pressure when deploying cloud services. The Dutch Authority for the Financial Markets (AFM) and De Nederlandsche Bank (DNB) have issued guidance...

Data Security Risks in Financial Services After Brexit

by Bob Ertl April 5, 2026April 5, 2026 | Regulatory Compliance

Brexit fundamentally altered the regulatory and operational landscape for financial services firms operating across UK and European jurisdictions. Organisations that once managed data security under a unified regulatory framework now...

Why Zero-Trust Architecture Matters for UAE Investment Firms

by Tim Freestone April 5, 2026April 5, 2026 | Regulatory Compliance

Investment firms in the UAE operate in one of the world’s most digitally ambitious regulatory environments. They manage extraordinarily sensitive client data, execute cross-border transactions, and navigate compliance obligations that...

How to Implement Third-Party Risk Management Under DORA

by Danielle Barbour April 3, 2026April 3, 2026 | Third Party Risk

Financial institutions across Europe face a regulatory environment where operational resilience depends on third-party service providers. The Digital Operational Resilience Act establishes binding requirements for managing third-party risk, particularly for...

How to Secure Sensitive Financial Data Transfers Between Third-Party Providers

by Tim Freestone April 3, 2026April 3, 2026 | Third Party Risk

Financial services organisations routinely transfer client portfolios, transaction records, and regulatory filings to settlement counterparties, custody banks, payment processors, and regulatory reporting platforms. Each transfer creates exposure. A single unencrypted...

NIS 2 Directive Security Requirements for UK Banking Institutions

by Danielle Barbour April 2, 2026April 2, 2026 | Regulatory Compliance

The NIS 2 Directive establishes comprehensive cybersecurity obligations across essential and important entities throughout Europe, and its influence extends to UK banking institutions through supply chain relationships, cross-border operations, and...

Custom AI Applications Are Reaching Production Before Security Catches Up

by Patrick Spencer March 31, 2026March 31, 2026 | Cybersecurity Risk Management

Gartner’s March 2026 forecast puts a number on what security leaders have been sensing for months: by 2028, half of all enterprise cybersecurity incident response work will center on custom-built...

AI Compliance by Industry: A Regulatory Reference Guide

by Danielle Barbour March 30, 2026March 30, 2026 | Regulatory Compliance

There is no universal AI compliance framework. Every organization deploying AI inherits the regulatory obligations attached to the data it processes — and those obligations vary dramatically by industry, data...

AI Compliance Requirements for Financial Services Firms: What You Need to Know

by Danielle Barbour March 30, 2026March 30, 2026 | Regulatory Compliance

Financial services firms are among the most aggressive early adopters of AI — and among the most exposed when it comes to compliance. The regulatory environment they operate in was...

20 States, Zero Federal Law, and a 40% Cost Increase

by Danielle Barbour March 26, 2026March 26, 2026 | GDPR Compliance

The United States now has more than 20 comprehensive state privacy laws on the books, with Oklahoma’s SB 546 — the latest to pass — set to take effect in...

What the SEC’s AI Disclosure Requirements Actually Mean for Compliance Teams

by Danielle Barbour March 25, 2026March 25, 2026 | Regulatory Compliance

Financial services firms have been deploying AI agents against their most sensitive workflows — client reporting, trade reconciliation, regulatory filing preparation, and portfolio analysis. Most of these workflows touch data...

NYDFS Part 500 and AI: What New York’s Cybersecurity Regulation Requires of Agent Governance

by Danielle Barbour March 25, 2026March 25, 2026 | Regulatory Compliance

New York’s financial services institutions are deploying AI agents across client reporting, underwriting, claims processing, fraud detection, and regulatory workflows. Most of these workflows access nonpublic information — the category...

AI Governance for Wealth Management: SEC-Defensible Agent Workflows

by Danielle Barbour March 25, 2026March 25, 2026 | Regulatory Compliance

Wealth management is one of the highest-velocity AI adoption sectors in financial services — and one of the most heavily regulated. AI agents are being deployed for quarterly client reporting,...

Get started.