Across five very different sessions at Risk Live Europe, one message kept resurfacing. Risk events no longer move at the speed of your governance. The event convened chief risk officers, geopolitical strategists, and treasury leaders from top financial institutions who weren't debating whether their frameworks were sound. They were asking whether those frameworks were fast enough, and the resounding conclusion was that they are not. Instant payment rails settle in ten seconds. Social...

Operational Resilience is Becoming an Ecosystem Visibility Problem At this year’s Operational Risk & Resilience in Financial Services event in Amsterdam, one message surfaced repeatedly across panels, roundtables, and private conversations: Operational resilience is becoming an ecosystem intelligence problem. Firms are no longer struggling simply with governance, documentation, or regulatory compliance.They are struggling to maintain visibility across increasingly interconnected supplier,...

When the cyber incident involving Stryker became public, the immediate focus was on disruption. Stryker, a major global medical device manufacturer and a critical supplier to hospitals and healthcare providers, operates at the center of a highly interconnected ecosystem. Any interruption at that position carries consequences that extend far beyond the company itself. The implications were immediate and multi-dimensional. Operational systems were affected. Response costs escalated across...

For decades, the global banking sector has operated under a simple, increasingly fragile mantra: Know Your Supplier (KYS). For Chief Risk Officers (CROs) and Third-Party Risk Management (TPRM) functions, KYS has served as the foundation of operational resilience, anchored in due diligence, SOC 2 audits, and contractual safeguards designed to ensure that any entity touching bank systems is vetted, verified, and compliant. But today’s risk environment no longer behaves in linear, contained...

Why observable exposure—not internal assurance—is becoming the new standard of risk governance A Shift Hiding in Plain Sight When JPMorgan was fined by the European Central Bank for prudential misreporting, the most important detail was not the size of the penalty, nor even the underlying error. It was the regulator’s conclusion: the firm’s internal systems had failed to detect discrepancies that were externally visible across multiple reporting cycles. For 15 consecutive quarters, exposures...

Regulators, investors, and risk leaders now expect real-time, evidence-based assurance In the traditional architecture of financial institutions, Internal Audit (IA) was often viewed as the "rear-view mirror," verifying compliance long after risks had been taken. As global markets face unprecedented complexity, shifting geopolitical dynamics, and the rapid ascent of AI, that model is breaking. It is time for IA to evolve. Internal Audit is no longer a retrospective control function. It is...

Third-party risk no longer stops at named vendors. As dependencies extend into fourth and fifth parties, hidden concentration and interdependency risks drive outsized losses. TPRM leaders need forward-looking visibility across the full ecosystem—before small disruptions become systemic failures.

Alaska Airlines has experienced two major flight groundings this year due to IT system failures—an illustration of how operational disruptions now carry far greater regulatory and financial consequences under DORA. Alaska Airlines is not an isolated example. Many high-profile outages and supply-chain breaches have demonstrated the urgency of DORA’s requirements for end-to-end ICT governance, incident response, and third-party oversight across the financial ecosystem: The 2018 TSB core-banking...

After engaging with risk leaders at six global forums across three continents, one theme stands out: new forms of risk are emerging almost daily — and tariffs are among the most consequential. Across G-SIBs and leading institutions, the uncertainty introduced by evolving trade policies has become a persistent source of financial and operational stress. Automotive sector: U.S. tariffs on imports from Canada and Mexico have disrupted integrated production chains, amplifying credit and supply...

In today’s financial landscape, the cost of poor decision-making has never been higher. Banks, insurers, and asset managers operate in an environment where a single misstep can trigger regulatory sanctions, reputational damage, or billions in lost market value. Boards and regulators now demand not only accuracy, but also transparency, foresight, and defensibility in every assessment. Artificial intelligence has become a natural response to this complexity. Large financial institutions,...

Many companies are talking about agentic AI, but not all of it delivers on the promise. This post explains what it really means, how it differs from simple automation, and how leaders can evaluate its real business value.

In 2023, the Office of the Comptroller of the Currency (“OCC”) issued a revised approach to enforcement for larger banks. The revised approach states that the OCC will take additional action against banks and executives that exhibit “persistent weaknesses” in governance, risk management or operational practices and lays out heightened standards that large banks must adhere to.

We are thrilled to announce that Weave.AI has been named to the 2025 Chartis Research RiskTech AI 50, a prestigious global ranking recognizing the top technology innovators shaping the future of financial services risk.

Cyber risk has become a full-scale governance crisis. In 2025, global damages from cybercrime are projected to exceed $1.2 trillion, impacting organizations across every sector—from banking and insurance to healthcare, energy, telecommunications, and manufacturing. Cyber threats extend beyond IT systems, disrupting operations, eroding trust, and exposing institutions to regulatory sanctions, reputational damage, and strategic loss.

Why Emerging Risks Require Strategic Foresight and Next-Gen Technology

Two major money laundering scandals involving TD Bank and Block, Inc. exposed critical failures in AML oversight—failures that cost billions. While tactical tools fell short, the real gap was strategic. Weave.AI empowers financial leaders with proactive, regulation-aligned insights to detect compliance weaknesses before they become crises. Learn how AI is reshaping AML oversight from reactive to anticipatory.

Companies are often tempted to exaggerate their capabilities to win new customers, appease regulators, avoid trouble and attract investors. This practice, often referred to as ‘washing’, includes a variety of ways that companies create content that makes their capabilities seem greater than they are, or paints the company in an overly positive light. Identifying washing practices can be challenging and may lead to significant negative consequences. Investors can make a bad investment based...

Recent high-profile enforcement actions, such as TD Bank’s $3.1 billion AML fine, underscore the critical cost of inadequate governance, risk management, and compliance (GRC). While TD Bank’s case is one of the most publicized, it is far from an isolated incident. In 2024 alone, U.S. regulators issued a record 120 enforcement actions while global regulatory fines soared to $19.3 billion. Beyond the direct cost of fines, undetected compliance gaps can lead to operational disruptions and...

As millions of people adopt ChatGPT and other large language model (LLM)-based technologies to get information, many are noticing that the responses they get back are not always accurate. In some cases, these responses can be dangerously misleading or entirely false. This phenomenon, widely known as ‘AI hallucinations’, occurs when a LLM generates content that is factually incorrect or detached from reality. Despite advancements in AI, hallucinations remain a persistent challenge—even among...