Sarah Hamilton

In 2026 agentic AI in financial services moved into production, and the updates that matter most for compliance are no longer about what the technology might do but about how banks are governing what it alrea...

Three years ago, generative AI in banking meant a handful of cautious proofs of concept walled off from customer data. Today the largest U.S. institutions have deployed AI assistants to hundreds of thousands ...

Building a third-party risk management program is how a financial institution turns that sprawling dependency map into something it can govern. Outsourcing an activity does not outsource the responsibility for ...

When comparing community banks vs regional banks through a compliance lens, asset size is the variable that determines not just which regulations apply but how intensively they apply and what operational infras...

For compliance officers and risk managers at financial institutions, the ambiguity surrounding the difference between “AI agents” and “LLMs” has real consequences. Governance for a language model differ...

Most community banks and credit unions have traditionally managed operational risk, vendor risk, compliance, audit, and resilience as separate programs. To consolidate the register, controls, and reporting for ...

Most US banks already run an enterprise risk management program using board-approved risk appetite, a chief risk officer, a risk committee, an annual ERM refresh, and a register tracked across multiple categori...

Alongside any organization’s final 2026 compliance program, there are questions bankers ask when they need a fast, accurate answer. Those questions reveal the topics where regulatory guidance is genuinely unc...

A written risk management plan is the artifact bank examiners ask for first, yet most institutions do not treat it as the operating document it needs to be. The OCC Heightened Standards, the FFIEC IT Examinatio...

Most content addresses the buyer side of insurance risk management (how a corporation manages business risk by purchasing coverage). That is corporate risk transfer, but insurance risk management means somethin...