Sarah Hamilton

An AI governance checklist for a bank or credit union should include a map of each AI use to the guidance that governs it and six governance steps (inventory, risk rating, pre-use testing, human review, ongoing mon...

In the point solutions vs platform decision, a bank or credit union compliance team needs a connected platform once examiners expect one obligation traced from regulatory change through policy, control, testing and...

Certain AI agent platforms give a bank or credit union the tools to build its own agents, while purpose-built compliance agents such as Ask Kaia ship with a regulatory knowledge base, cited outputs and review recor...

A credit union compliance team builds compliance intelligence by logging the signals it already receives against the obligations they touch, ranking each by member harm and exam exposure, and giving each an owner a...

Operational resilience metrics for US banks measure, for each critical operation and core business line, how long a disruption lasts against the tolerance the board approved, how fast recovery happens against the r...

An audit-ready audit trail for a compliance program links each obligation to its control, the test of that control, any finding and its remediation, and the approval that closed it, with every step time-stamped, at...

Examiners expect a bank's fair lending testing to cover the underwriting, pricing, steering, redlining and marketing risks its own risk assessment identifies, through comparative file review and statistical analysi...

The risk management news that matters most to banks and credit unions in Q3 2026 is the OCC and FDIC final rule redefining unsafe or unsound practice and limiting matters requiring attention, followed by the intera...

Bank AI regulations in the United States are a set of existing supervisory instruments covering model risk, third-party risk, consumer protection and information security, which a bank reads its AI use cases agains...

Banks use operational risk indicators to log every early signal, a key risk indicator breach, an audit finding, an RCSA finding, or a near miss, into one issue register the moment it appears, then assign an owner, ...