Benchmarking
Banks building GenAI governance in parallel to model risk
Risk Benchmarking: Majority have established AI governance committees, but ownership is fragmented
The evolution of operational risk scenario analysis
How structured scenario analysis paired with AI-enabled challenge can modernise banks’ operational risk practices
Model risk managers are being asked to do more with less
Risk Benchmarking study finds function being handed expanding AI workload, on flat resources
Banks are automating GenAI testing, but scope varies widely
Risk Benchmarking: LLM-as-judge offers model testing at scale, but few lenders use it to facilitate autonomous sign-off
Model Risk Benchmarking 2026: explore the data
View interactive charts from Risk.net’s 44-bank study, covering model inventories, resourcing, GenAI governance, validation and regulation
A third of banks do not maintain logs for GenAI models
Risk Benchmarking study finds few banks review prompt logs systematically, with larger firms focusing on higher risk use cases
Few banks formally evaluate GenAI human-in-the-loop controls
Risk Benchmarking: G-Sibs and challengers use tools to test controls efficacy; others rely on judgement
From gatekeeper to coach: model risk bids to reinvent itself
Model Risk Benchmarking data reveals a function in flux, grappling with resource cuts, AI models, regulatory divergence
Banks insure against cyber risk, but rarely claim
Risk Benchmarking study finds big banks aggressively negotiating on cost of cover, and seeking offsets to Pillar 2 capital
Four in five banks use AI to manage op risks
Risk Benchmarking: Cyber risk use cases growing; governance and ROI doubts give some pause
Build, or buy: banks still don’t love their GRC vendors
Risk Benchmarking study finds a record number of firms reviewing tech provision for top op risks, amid touted wave of AI-led self-builds
AI use fastest-growing area of op risk regulatory scrutiny
Risk Benchmarking study finds EU AI Act the dominant driver of nascent bank risk frameworks, even well beyond Europe’s borders
On cyber risk, tech debt is big banks’ top challenge
Risk Benchmarking: Fragmented stacks make identifying vulnerabilities harder; manual workarounds increase human errors
Half of banks use scenarios to set third-party Pillar 2 capital
Risk Benchmarking study finds resilience risk less widely covered than cyber and IT disruption, but more formalised where scenarios exist
Second line seeks to stamp its authority on AI risk
Risk Benchmarking study finds fragmented accountability for AI risk among banks, and most are short of controls to contain it
Op Risk Benchmarking 2026: explore the data
View interactive charts from Risk.net’s 61-bank study, covering risk appetite breaches, controls, scenario analysis, GRC tech and regulation
Appetite breaches climb for top op risks
Risk Benchmarking: Low tolerance and heightened threat environment combine to test banks’ limits for cyber, resilience, third-party risk
Op Risk Benchmarking: Banks seek a home for AI risk
Risk.net’s 2026 study sees record participation and collective unease, as banks race to incorporate AI into op risk frameworks
ALM in 2026: the fast-track from compliance to competitive edge
How banks are modernising asset-liability management for a more volatile world
Top 10 op risks timeline: what the past decade of data reveals
Drawing on Risk.net’s annual research published between 2017 and 2026
Future-proofing the client lifecycle: A COO’s blueprint for scalable, compliant growth
Learn how capital markets COOs are transforming the client lifecycle to reduce costs, accelerate onboarding and scale operations – without increasing headcount.