Top 10 operational risks for 2026
Industry shares intel on biggest collective threats, as well as remedies and loss gauges
More on the Top 10 Op Risks 2026 here
1. Information securityFor the fifth year running, information security ranks as the number one operational risk in the industry’s annual poll. Financial institutions report that attacks are becoming smarter and harder to detect – in many cases, aided by technological leaps in artificial intelligence. The evolving cyber threat is forcing firms to continually
Only users who have a paid subscription or are part of a corporate subscription are able to print or copy content.
To access these options, along with all other subscription benefits, please contact info@risk.net or view our subscription options here: http://subscriptions.risk.net/subscribe
You are currently unable to print this content. Please contact info@risk.net to find out more.
You are currently unable to copy this content. Please contact info@risk.net to find out more.
Copyright Infopro Digital Limited. All rights reserved.
As outlined in our terms and conditions, https://www.infopro-digital.com/terms-and-conditions/subscriptions/ (point 2.4), printing is limited to a single copy.
If you would like to purchase additional rights please email info@risk.net
Copyright Infopro Digital Limited. All rights reserved.
You may share this content using our article tools. As outlined in our terms and conditions, https://www.infopro-digital.com/terms-and-conditions/subscriptions/ (clause 2.4), an Authorised User may only make one copy of the materials for their own personal use. You must also comply with the restrictions in clause 2.5.
If you would like to purchase additional rights please email info@risk.net
More on Benchmarking
Enterprise Risk Benchmarking 2026: explore the data
View interactive charts from Risk.net’s 52-bank study, covering enterprise risk governance, appetite setting, board reporting, scenario analysis, culture and resilience
ERM’s influence is growing as its ranks are shrinking
Risk Benchmarking: Mandates expanding to include new threats like AI and geopolitical risk, but majority report flat to down headcount
Risk managers go softly-softly on AI adoption
ERM teams still in testing mode for most AI use cases, latest Risk Benchmarking study shows
Most banks embed risk appetite into business decisions
Risk Benchmarking: Second line more likely to be shut out when it comes to product launches or market entry
Four in five banks report breaching risk appetite in past year
Risk Benchmarking: Those reporting no breaches run skinnier appetite frameworks, despite similar governance mechanisms
Slimmed-down and automated, ERM seeks a seat at the top table
Latest Risk Benchmarking exercise finds ERM growing in influence, even as headcounts shrink
Banks building GenAI governance in parallel to model risk
Risk Benchmarking: Majority have established AI governance committees, but ownership is fragmented
Lower-risk models face excessive reviews, banks say
Risk Benchmarking: Validation workload stretching teams, amid emerging regulatory divergence
