
Menghan Xiao
Menghan Xiao is a reporter on the Risk Management desk, based in New York. She earned a bachelor’s in economics from Mount Holyoke College in 2021, and a master’s in journalism from Northwestern University in 2022. Prior to Risk.net, Xiao covered cyber security and technology for SC Media.
Contact Xiao at menghan.xiao@infopro-digital.com
Follow Menghan
Articles by Menghan Xiao
OCC’s security chief on generative AI with guardrails
Clearing house looks to scale technology across risk and data operations – but safety is still the watchword
Market whipsaw spurs calls to rethink buy-side stress-testing
Risk Live Boston: Morgan Stanley and BlackRock urge rethink of scenario assumptions and top-down factor models
Top 10 op risks: AI arms race leaves risk teams playing catch-up
As firms invest for fear of being left behind, op risk managers urge caution on data, controls and access
SEC’s Peirce calls for rethink of international standards
Risk Live Boston: regulator rejects international calls for bank-like regulation of investors
DeepSeek success spurs banks to consider do-it-yourself AI
Chinese LLM resets price tag for in-house systems – and could also nudge banks towards open-source models
CCAR methodology may give first glimpse of Fed’s transparency drive
Industry calls for more details on Global Market Shock and new private equity treatment
Fed’s NBFI scenario may be more use than CCAR – experts
Main severely adverse scenario does not capture contagion risks from any squeeze on non-banks
Credit loss database reveals holes in Basel’s IRB formula
Researcher has used two decades of data to propose improved internal model methodology
Banks urged to track vendor AI use, before it’s too late
Veteran third-party risk manager says contract terms and exit plans are crucial safeguards
AI ‘lab’ or no, banks triangulate towards a common approach
Survey shows split between firms with and without centralised R&D. In practice, many pursue hybrid path
Everything, everywhere: 15 AI use cases in play, all at once
Research is top AI use case, best execution bottom; no use is universal, and none shunned, says survey
Researchers, quants, strats – AI is coming for you
Survey IDs roles to be most impacted by front-office AI, but experts say many will change, not disappear
Looming US Basel endgame redraft sparks calls to save IRB
Experts say 20 years of data makes credit risk models more appropriate than standardised approach
How Citi moved GenAI from firm-wide ban to internal roll-out
Bank adopted three specific inward-facing use cases with a unified framework behind them
Fed stress-testing operational readiness of discount window
Experts say consultation on improved ops should be accompanied by focus on willingness to borrow
CFTC weighs third-party risk rules for CCPs
Clearing houses could be required to formally identify and monitor critical vendors
Cyber risk can be modelled like credit risk, says Richmond Fed
US supervisors may begin to use historical datasets to assess risk at banks and system-wide
What Goldman’s appeal victory means for Fed stress tests
Decision could embolden more banks to appeal, analysts say. But others believe result is one-off
MUFG blocks vendors that refuse to reveal subcontractors
Risk Live: US arm of Japanese megabank asks first line to sign written waivers when risk advisories are ignored
Rough patch: CrowdStrike sparks an auto-update debate
Automating software updates helps keep hackers at bay but can introduce op risk; banks balance the two
Banks urged to keep regulators in the loop on AI plans for AML
Risk managers advocate five-year strategies and compliance teams’ ownership of the tech they use
Banks urged to boost third-party scrutiny amid AML crackdown
Three US regulators highlight deficiencies in banks’ due diligence on fintech partners
Should banks risk lightning hitting twice for CrowdStrike?
Bank tech teams divided on whether to give security vendor a second chance after update crash