Risk Management

E.SUN Bank and IBM have developed a comprehensive AI governance framework for the financial sector, addressing critical challenges of model validation, accountability, and regulatory compliance. This framework adapts global standards like the EU AI Act and ISO/IEC 42001, offering banks a structured approach for pre-deployment reviews, ongoing monitoring, data utilization, and risk assessment. The initiative aims to empower financial institutions to scale AI adoption confidently while ensuring robust oversight and regulatory adherence.

Norway’s $2 trillion sovereign wealth fund is employing AI, including Anthropic’s Claude, to enhance its investment screening process and identify reputational and ethical risks. The AI analyzes vast amounts of data, providing rapid insights into governance and sustainability for over 7,200 companies. This allows for proactive risk mitigation and helps detect issues like forced labor or corruption, even before they are widely reported, enabling timely divestment and loss avoidance.

Citi has successfully integrated AI into its daily operations, empowering approximately 4,000 employees across diverse roles. Instead of siloed pilots, the bank fostered pervasive team-level adoption through its “AI Champions” program. This strategy prioritized employee training and support, enabling widespread use of firm-approved AI tools for everyday tasks with robust safeguards in place. This approach offers valuable lessons for other enterprises looking to scale AI initiatives effectively.

New research reveals a disconnect between CEOs and CISOs on AI. CEOs see AI as a productivity booster, while CISOs view it as a major cybersecurity risk. AI offers both advanced defense and novel threats. A survey shows low CEO confidence in AI for cybersecurity, and a significant preparedness gap between US and UK leaders. Amidst rising ransomware, executives plan cybersecurity budget increases.

UL Solutions and Saudi Electricity Company have partnered to enhance fire safety and life protection standards in Saudi Arabia. This collaboration will leverage UL’s expertise to develop training programs, test and certify systems, and cultivate local technical skills, bolstering safety for critical infrastructure amidst the Kingdom’s rapid development and Vision 2030 initiatives.

.BBVA has rolled out ChatGPT Enterprise to 11,000 staff, one of the largest AI deployments in banking. A pilot showed workers saved three hours weekly, with 80% daily use and thousands of custom GPTs for internal workflows. The bank now embeds LLMs into risk analysis, software development, and a new “Blue” virtual assistant for customers, while enforcing enterprise‑grade security, role‑based training, and performance monitoring. BBVA expects up to 5% operating‑cost reductions and faster product launches, positioning it as a benchmark for AI adoption in the regulated financial sector.

First Trust Advisors announced that its First Trust Income Opportunities ETF (FCEF) will make a $0.1350 per‑share monthly cash distribution, with an ex‑dividend and record date of Dec 11, 2025 and payable on Dec 31, 2025. The fund, managed by First Trust Advisors, targets income‑focused investors through a diversified mix of dividend‑paying equities, REITs, and short‑duration bonds, leveraging algorithmic creation/redemption for tax efficiency. Investors should consider market, sector, liquidity and cybersecurity risks before investing. Source: First Trust Advisors L.P.

Intercontinental Exchange (ICE) announced that Thailand’s InnovestX Securities, a SCBX subsidiary, will adopt ICE’s Portfolio Analytics (IPA) platform. IPA offers a unified, cloud‑native environment for pre‑trade pricing, intraday analytics, and lifecycle management across multiple asset classes, leveraging ICE’s high‑resolution market data and real‑time risk dashboards. The solution aims to enhance InnovestX’s pricing accuracy, automate workflows, and tighten risk controls for structured products, reducing manual errors and accelerating trade execution. ICE highlights the partnership as part of its strategy to expand technology services in emerging markets and support data‑driven risk management.

Boards are demanding productivity gains from enterprise AI, but features like web browsing and application connectivity introduce cybersecurity risks, including indirect prompt injection attacks. Tenable research highlights these vulnerabilities, potentially enabling data exfiltration and malware persistence. Mitigation requires treating AI assistants as distinct IT entities, subject to rigorous audit and zero-trust controls, including a comprehensive AI system registry and context-aware feature constraints. Organizations must invest in training and continuous monitoring to proactively address emerging threats and evolving vendor security postures.

AI is transforming workplace communication, presenting enterprises with governance challenges. LeapXpert’s platform addresses this by consolidating external client communications from platforms like WhatsApp and Teams into a governed environment. Their AI engine, Maxen, analyzes messages for sentiment, compliance, and intent while maintaining auditability. This provides stakeholders with transparent records and flagged anomalies, improving efficiency and risk management. A case study showed a 65% reduction in manual review time. LeapXpert emphasizes the need for transparency and control to leverage AI’s benefits without sacrificing data security.