Financial Services Archives

DORA Resilience for Luxembourg Investment Firms

Luxembourg Investment Firms Face New DORA Requirements

by Marc ten Eikelder June 19, 2026June 19, 2026 | Regulatory Compliance

Luxembourg’s Digital Operational Resilience Act (DORA) requirements represent a fundamental shift in how investment firms must approach data governance and operational continuity. DORA establishes comprehensive frameworks for managing digital operational...

DORA and ICT Risk Management: A Practical Guide for Financial Institutions

by Danielle Barbour June 18, 2026June 18, 2026 | Regulatory Compliance

The Digital Operational Resilience Act (DORA) represents one of the most comprehensive ICT risk management frameworks in modern financial regulation, establishing binding obligations for firms to demonstrate robust cyber resilience...

DORA Resilience Requirements for UK Banks Post-Brexit

How DORA Changes Everything for UK Banks Operating Across EU Markets

by Danielle Barbour June 16, 2026June 16, 2026 | Regulatory Compliance

The Digital Operational Resilience Act (DORA) represents a fundamental shift in how financial institutions must approach operational risk management across European markets. For UK banks maintaining operations within EU jurisdictions,...

Email Security Imperatives for Northern Ireland Banks

Why Northern Ireland Banks Need Better Email Security

by Marcell Mock June 16, 2026June 16, 2026 | Secure Email

Northern Ireland’s banking sector faces unprecedented cybersecurity challenges as threat actors increasingly target financial institutions through sophisticated email-based attacks. With regulatory scrutiny intensifying and customer trust at stake, banks across...

Single Architecture for Dual DORA and GCC Compliance Horizons

Two Compliance Horizons: What the EU’s 96% DORA Failure Rate Means for the Gulf

by Marc ten Eikelder June 5, 2026June 5, 2026 | Regulatory Compliance

The statistic from the Span Cyber Security Arena conference deserves attention beyond Europe. Ninety-six percent of financial services firms in EMEA — including those headquartered in or operating from the...

Content Layer Controls for Shadow AI Risks

How to Govern Shadow AI Without Killing Innovation

by Patrick Spencer June 5, 2026June 5, 2026 | Cybersecurity Risk Management

The 8-K filing matters because it resets the risk calculus. SEC cybersecurity disclosure rules require public companies to report material cybersecurity incidents within four business days of determining materiality —...

AI Governance Strategies for Scottish Banks

AI Governance in Scottish Banking: Building Secure, Compliant Frameworks Beyond 2026

by Danielle Barbour June 5, 2026June 5, 2026 | Regulatory Compliance

Scottish financial institutions face unprecedented challenges in governing artificial intelligence systems whilst maintaining data compliance and operational security. As AI integration accelerates across retail banking, investment services, and corporate lending,...

EU Regulatory Overlap Strains Organizational Compliance Efforts

NIS2, DORA, and the EU AI Act: Why European Organizations Are Struggling to Keep Up

by Marc ten Eikelder June 5, 2026June 5, 2026 | Regulatory Compliance

European organizations are not failing at regulatory compliance because they lack commitment. They are failing because three major regulatory frameworks arrived at nearly the same time, with overlapping but distinct...

UK Financial Services Third-Party Risk Challenges

Five Third-Party Risk Management Challenges for UK Financial Services

by Bob Ertl June 5, 2026June 5, 2026 | Third Party Risk

UK financial services face unprecedented pressure from regulatory scrutiny, sophisticated cyber threats, and complex third-party ecosystems. Managing third-party risks effectively has become a strategic imperative, yet many organisations struggle with...

NIS 2 Compliance Challenges for Spanish Finance

5 Critical NIS 2 Compliance Challenges for Spanish Financial Institutions

by Danielle Barbour June 5, 2026June 5, 2026 | Regulatory Compliance

Spanish financial institutions face unprecedented regulatory complexity under the NIS 2 Directive. The directive’s expanded scope and enhanced cybersecurity requirements demand fundamental changes to security risk management frameworks, incident response...

AI Governance Controls Finance and Legal Need Now

When AI Agents Touch Regulated Data, Governance Can’t Wait

by Camilo Camilo Artiga Purcell June 2, 2026June 3, 2026 | Cybersecurity Risk Management

U.S. financial institutions spend $35–40 billion annually on AML compliance operations — and investigators waste most of that budget manually stitching together evidence before any real analysis begins. That was...

Non-Human Identity Governance Reduces Breach Damage in Zero Trust

Authentication Gets You In. Governance Determines the Damage.

by Patrick Spencer June 1, 2026June 1, 2026 | Cybersecurity Risk Management

Seventy-one percent. That’s the share of enterprises that experienced an identity-related breach in 2025 according to new Sophos research. More than two-thirds of organizations had their identity systems compromised in...

Cyber Resilience Strategies for Benelux Banking

Cyber Resilience in Benelux Banking: Navigating Regulatory Demands and Evolving Threats

by Marc ten Eikelder May 30, 2026May 30, 2026 | Regulatory Compliance

Benelux banking institutions face an evolving cyber threat landscape while managing stringent regulatory requirements across Belgium, the Netherlands, and Luxembourg. Financial services leaders need comprehensive strategies that address both immediate...

PraisonAI Lesson: Why AI Agents Ship Insecure by Default

When AI Agents Ship Insecure by Default: The PraisonAI Lesson Every CISO Needs to Read

by Patrick Spencer May 28, 2026May 28, 2026 | Cybersecurity Risk Management

On May 11, 2026, at 13:56 UTC, GitHub published advisory GHSA-6rmh-7xcm-cpxj for CVE-2026-44338, an authentication-bypass flaw in PraisonAI. At 17:40 UTC — three hours, 44 minutes, and 39 seconds later...

AI Adoption Outpaces Governance and Policy Controls

The AI Policy Gap: When 90% Use AI and 25% Have No Rules

by Patrick Spencer May 28, 2026May 28, 2026 | Cybersecurity Risk Management

ISACA’s 2026 AI Pulse Poll surveyed 3,400 digital trust professionals across IT audit, governance, cybersecurity, privacy, and emerging technology roles. Three numbers tell a story most security leaders already know...

Get started.