Christine Thomas

Five years ago, the operational risk management challenges that dominated examination cycles looked recognisable from the early-2000s Basel II event categories. Today they still apply, but the underlying driver...

Most US banks run an enterprise risk management program and a separate operational risk management function. The two often share a chief risk officer and elements of the same taxonomy, and are also routinely co...

A community bank now tracks credit, operational, third-party, cyber, regulatory, and reputational risks through systems that rarely talk to one another. The risk surface has widened faster than most institution...

A bank's biggest delivery failures come from project risks that were known but not actively managed, such as mistakes with vendor cutover dates, regulatory deadlines, and dependency chains. Project risk managem...

Most US banks now run six or seven separate risk systems. Operational risk lives in one tool, third-party risk in another, cyber risk in a third, compliance in a fourth, internal audit in a fifth. Each was boug...

A search for "best risk management software" returns listicles assembled largely from review-site SEO and vendor sponsorships. The platforms that lead those lists are rarely the ones that fit a community or...

Robotic process automation reshaped banking operations by automating rule-bound tasks at scale. AI agents' integration brings a class of technology that can reason, adapt, and act across connected secure syst...

Every bank examination begins with the same question: does this institution understand its own risk? Risk assessments for banks map where an institution has exposure, what controls are in place, and how much ...

Regulators from the OCC, Federal Reserve, and FDIC consistently flag deficiencies in issues management during examinations. Without a structured issues management strategy, findings accumulate into exam esc...

OCC and FDIC examiners spend less time with paper binders and more time asking how you monitor compliance in real time. Banks and credit unions still toggling between spreadsheets, standalone audit tools, a...