Insights & Library
A working library for people navigating regulated business.
Articles, practitioner notes and longer-form thinking across governance, risk, compliance, financial crime, regulatory strategy and leadership. Whistleblowing is maintained as its own distinct collection so that speak-up material remains accessible without being mixed into the core RCC disciplines.
Governance
Board oversight, accountability, decision rights, operating structures and the evidence that supports effective governance.
Explore governance32 indexedRisk
Risk appetite, ownership, controls, operational resilience, technology risk and the practical management of uncertainty.
Explore risk26 indexedCompliance
Compliance frameworks, monitoring, control assurance, remediation and the practical implementation of obligations in regulated businesses.
Explore compliance05 indexedFinancial Crime
AML, fraud, sanctions, KYC and KYB, transaction monitoring, investigations and financial crime risk management.
Explore financial crime19 indexedRegulatory
Regulatory strategy, authorisations, supervisory expectations, licensing, regulatory change and readiness for scrutiny across regulated markets.
Explore regulatory15 indexedWhistleblowing
Speak-up decisions, disclosure channels, evidence, reporter protection, retaliation risk and case studies focused specifically on whistleblowing practice.
Explore whistleblowingStart here
Selected reading from the growing collection.
Publications can sit across several subject areas where the underlying issue genuinely overlaps governance, risk, compliance, financial crime or regulatory matters.
DORA and Operational Resilience Top EU Regulatory Focus
Technical depth 4/502Regulatory · Governance · Risk · Compliance · Financial CrimeUK Crypto Authorisation Gateway Opens 30 September 2026: FCA Expectations
Technical depth 4/503Governance · Risk · ComplianceThe GRC Triad: How Governance, Risk and Compliance Actually Interconnect
Technical depth 2/5Browse
32 publications in view
DORA and Operational Resilience Top EU Regulatory Focus
A practitioner view of DORA as an enterprise-risk and governance issue, using 2026 incident data to challenge the idea that operational resilience is primarily a cyber or IT programme.
UK Crypto Authorisation Gateway Opens 30 September 2026: FCA Expectations
A readiness-focused review of the FCA crypto authorisation gateway, the application window and the evidence firms should already be able to produce around permissions, governance, controls and accountable ownership.
The GRC Triad: How Governance, Risk and Compliance Actually Interconnect
A practitioner view of how governance, risk and compliance operate as connected but distinct disciplines, including where handoffs and accountability commonly fail.
At What Point Does Professional Loyalty Stop Making Commercial Sense?
A practical look at regulated accountability, senior management responsibility and the point at which professional loyalty can conflict with personal and regulatory exposure.
Corporate Governance Failures and Lessons Learned
Early warning signs of governance drift, practical board-level questions and actions that stand up under audit or supervisory challenge.
UK Crypto Regulation Enters a More Serious Phase
A policy-focused reflection on the shift in UK digital-asset regulation from broad intent toward perimeter, authorisation, prudential consequence, governance, safeguarding and business-model scrutiny.
Global Banking, Risk, Governance and Compliance Certifications
A comparative guide to major banking, risk, governance and compliance qualifications, with jurisdictional weighting, professional niches and career-path considerations.
How to Build a Compliance Career (and Why You Should)
A career-focused piece on the widening skill set required in modern compliance, from operational risk and technology to behavioural ethics and data.
Part 4 of 4: Closing the GRC Loop, What Regulatory Readiness Looks Like in 2025 and Beyond
A framework for moving beyond policy ownership to living regulatory systems across technology, people, controls and evidence.
ESG Is Not a Checkbox. It's a Compass, But Some of Us Are Still Trying to Afford the Map.
A personal and professional exploration of ESG, ethical decision-making and the tension between principle, access, economic pressure and practical implementation.
Part 3/4 From Regulation to Reality: Applied Governance, Risk, and Compliance in Practice
How to translate regulatory design into operational execution through procedures, workflows, accountability and culture.
Can a Compliance Officer/MLRO Be Too Good at Their Job?
A cautionary reflection on compliance independence, organisational culture and what happens when accountable control functions lack genuine authority, resources or access to decision-making.
Part 2: Advancing Governance, Compliance, and Operational Resilience in Swiss Fintech and Small Banking Institutions
A deeper look at FINMA, governance, compliance and operational-resilience expectations for Swiss fintech and smaller financial institutions, grounded in practical implementation experience.
The Great AI Disruption: 50+ Jobs That Will Be Replaced by AI by 2026, and More Facing Extinction by 2030
A broad assessment of AI-driven job displacement and the governance, skills and accountability questions created by rapid automation across professional and operational work.
Governance, IT Frameworks, and Compliance in Financial Services: A Young Professional Guide
An accessible guide to governance, compliance, operational resilience and the frameworks that connect them in financial services.
Jurisdiction Whitelisting & Regulatory Strategy: Navigating Global VASP Compliance
A practical account of combining country-risk scoring, sanctions, AML standards, licence permissions and commercial strategy when deciding where a digital-asset business can operate.
Truth Terminal: AI Meets Virtual Assets
A regulatory and financial-crime reflection on autonomous AI agents holding cryptoassets, asking who carries AML, tax and legal responsibility when an AI-controlled wallet accumulates value.
Shein Fined €150M for GDPR Consent Breaches
A regulatory update on consent, cookie placement and transparency failures, with a wider lesson on embedding compliance requirements into product and technology design.
Why every SMF16 and Head of Compliance needs a CMP
A practitioner argument for linking policies, procedures, registers, monitoring and reporting through a coherent Compliance Management Programme.
Starting in Governance, Risk & Compliance: A Complete Beginner's Context
A foundation chapter for people entering GRC, explaining the purpose of governance, risk and compliance before later chapters separate and deepen each discipline.
Danske Bank Estonia GRC Technical Annex (Case #1)
A GRC technical annex applying governance, risk, compliance and control analysis to the Danske Bank Estonia money-laundering case.
Risk: Definition, Types, and Lifecycle
A foundation chapter defining risk, common risk categories and the lifecycle used to identify, assess, treat, monitor and report exposure.
Strategic Risk: Identification and Mitigation
A practical chapter on identifying threats to strategy, testing assumptions and selecting mitigations that remain connected to governance and decision-making.
Operational Risk: The Story, How It's Connected, Key Aspects
An applied introduction to operational risk and its connections to controls, business continuity, resilience, technology and day-to-day execution.
Financial Risk Part 1: Foundations and Credit Risk
The first financial-risk chapter, introducing credit risk, core measures and the governance questions behind lending and counterparty exposure.
Market Risk, Financial Risk Part 2: Methods, Governance, FRTB and P&L Explain
A technical market-risk chapter covering common methods, governance, VaR, expected shortfall, FRTB and the role of P&L attribution and explanation.
Financial Risk Part 3: Liquidity Risk, Funding Resilience and IRRBB
The third financial-risk chapter, connecting liquidity, funding resilience and interest-rate risk in the banking book to governance and stress-testing expectations.
Compliance: Its Definition, Role, Purpose and Lifecycle
A foundation chapter treating compliance as an operating and management discipline, from obligations and control design through monitoring, reporting and improvement.
Followership in GRC: How People Actually Show Up When Ethics and Pressure Collide
A behavioural look at how professionals respond to pressure, authority and ethical conflict, using followership as a practical GRC and culture lens.
Regulatory Compliance vs Ethical Compliance
A practical distinction between meeting formal obligations and making defensible ethical decisions, with an evidence-led framework for difficult judgement calls.
Third Party Risk and Outsourcing Governance [UK / EEA]
A practical UK and EEA guide to the vendor lifecycle, due diligence, contracting, monitoring, evidence and exit planning across regulated outsourcing relationships.
Governance: Understanding Structures, Roles, and Accountability
A governance foundation chapter covering structures, decision rights, roles and the distinction between responsibility and accountability.