Op Risk Benchmarking 2023
Barking bank watchdogs don’t need to bite
Op Risk Benchmarking: Regional banks add staff, layer up controls to mitigate compliance risks

Execution & process errors: banks try to get beyond blunderdome
Op Risk Benchmarking: Mistakes mean more data for reporting, models and scenarios. But do banks learn from them?

Up to their necks in it: banks wrestle with change management
Op Risk Benchmarking: Banks recognise risks in transformation, but struggle to measure them

On cyber risk, regionals have no appetite for disruption
Op Risk Benchmarking: Smaller lenders fear outages and other IT bungles, as do regulators. So, what are they doing about it?
Maximum insecurity: banks tool up to meet cyber threat
Op Risk Benchmarking: Lenders confront “existential” threat of data leaks with bigger teams and better controls
Op Risk Benchmarking, round II: helping lenders borrow
From KRIs to four-eye checks, how do op risk frameworks at regional and domestic banks stack up?
New threats, old foibles prompt banks to switch GRC vendors
Op Risk Benchmarking: more than half of participants are reviewing or switching systems
Power play: how geopolitics is shaping op risk at G-Sibs
Geopolitics is a top five fear for G-Sibs, but most banks lack specialist risk staff and classical tools
No tick-the-box approach to compliance risks
G-Sibs share fear of regulatory run-ins, but lack common stance on modelling, KRIs and more
Bread-and-butter op risks at the top table
As G-Sibs are forced to do more, how can they avoid doing more wrong?
Sizing cyber: banks split on who owns and measures hack threats
G-Sibs split on risk modelling and management for IT disruption and infosec
Op Risk Benchmarking: Inside the G-Sibs
New initiative scrutinises op risk measurement and management practices at the world’s largest banks
Banks frequently breach appetite for top op risks
Op Risk Benchmarking: Five G-Sibs breached appetite in past year across four risk types, new research reveals