
When AI Agents Start Acting: Why Autonomy Is the Next Governance Risk
Over the last few weeks, we’ve looked at two related questions. The first was what happens when an AI model goes down. As firms embed

Over the last few weeks, we’ve looked at two related questions. The first was what happens when an AI model goes down. As firms embed

How often has an executive, or the risk committee or the board requested that the risk function present to them the “top risks” for the

Operational risk teams are not short of information. In many cases, they are surrounded by it. Loss events, internal assessments, audit findings, control reviews, regulatory

A commonly cited “emerging risk” is “climate change”, with risk functions advocating that the firm create policies around minimising the firm’s footprint on climate-sensitive areas,

Ever since operational risk, or as some prefer to call it, non-financial risk, was “created” through the consultative papers to what is commonly known as

Most firms have a plan for a data centre outage. They have plans for cyber incidents, supplier disruption, payment failures, cloud downtime, office closures and

Operational risk has long been defined as the risk of loss resulting from inadequate or failed internal processes, people and systems, or from external events.

Every year, RiskBusiness publishes its perceptions of the top risks, threats or concerns for the year ahead, based on published industry material, current affairs and corporate

Summary In a risk environment shaped by rapid AI adoption, converging cyber campaigns, geopolitical instability and accelerating regulatory expectations, traditional audit and assurance cycles are

Executive Summary Over the past decade, organisations have responded to rising regulatory expectations by adding controls, frameworks, policies and reporting layers across risk, compliance and