Top 10 op risks 2026: Cyber stays top, AI risk enters at fifth
Third-party and outsourcing risk climbs to third; fraud and fincrime edge out geopolitical risk
Artificial intelligence risk has entered the Top 10 Operational Risks for 2026, vaulting from a handful of write-in entries in 2025’s survey to rank fifth in its own right in Risk.net’s annual poll.
For several years, AI has loomed as a causal driver for other op risks, acting as an accelerant in particular for cyber threats, third-party risk and execution errors. This year, a plurality of
Only users who have a paid subscription or are part of a corporate subscription are able to print or copy content.
To access these options, along with all other subscription benefits, please contact info@risk.net or view our subscription options here: http://subscriptions.risk.net/subscribe
You are currently unable to print this content. Please contact info@risk.net to find out more.
You are currently unable to copy this content. Please contact info@risk.net to find out more.
Copyright Infopro Digital Limited. All rights reserved.
As outlined in our terms and conditions, https://www.infopro-digital.com/terms-and-conditions/subscriptions/ (point 2.4), printing is limited to a single copy.
If you would like to purchase additional rights please email info@risk.net
Copyright Infopro Digital Limited. All rights reserved.
You may share this content using our article tools. As outlined in our terms and conditions, https://www.infopro-digital.com/terms-and-conditions/subscriptions/ (clause 2.4), an Authorised User may only make one copy of the materials for their own personal use. You must also comply with the restrictions in clause 2.5.
If you would like to purchase additional rights please email info@risk.net
More on Benchmarking
Sell side losing fight over dirty CSAs, data shows
Risk Benchmarking exercise finds growing buy-side push for collateral flexibility
For enterprise risk, influence runs deeper than any veto
Risk Benchmarking study finds formal veto rights concentrated among the largest lenders, but used only as a last resort
Tech and data fragmentation irks enterprise risk managers
Risk Benchmarking: Often at the mercy of decisions made by other parts of the bank, ERM heads gripe at disparate systems, poor UX and reporting gaps
At bigger banks, enterprise risk owns scenario frameworks
Risk Benchmarking research finds ERM teams tasked with providing effective challenge on scenario construction across risk silos
Supervisors becoming more demanding, say ERM teams
Risk Benchmarking: More than half report rising supervisory contact, despite unchanging requirements for an ERM function
Enterprise Risk Benchmarking 2026: explore the data
View interactive charts from Risk.net’s 52-bank study, covering enterprise risk governance, appetite setting, board reporting, scenario analysis, culture and resilience
ERM’s influence is growing as its ranks are shrinking
Risk Benchmarking: Mandates expanding to include new threats like AI and geopolitical risk, but majority report flat to down headcount
Risk managers go softly-softly on AI adoption
ERM teams still in testing mode for most AI use cases, latest Risk Benchmarking study shows