Horizon Monitor: Regulatory Resilience I Week 46 This week sees essential Reading for CROs, CISOs, boards and Heads of Operational Resilience, Model Risk and Third Party Risk in banking and payments. In a busy seven days this briefing covers the OCC's new examination framework for generative and agentic AI, the HKMA's discussion paper on agent governance. It covers India's new cyber directions for payment operators and a live AI assisted attack on payment API's. We dive int

HKMA discussion paper & Canadian banks on AI, BOE & FCA on cloud, DFSA fines on security, Ten actively exploited flaws, EBA action dealing on AI

Easy Read Summary BCI Future of Resilience Report 2026

Who should read this edition Most Affected this Week Chief Information Security Officers, heads of vulnerability management, IT operations and DevSecOps in every sector running PHP, eMudhra certificates or the LiteLLM AI gateway. CROs and CISOs of ECB significant institutions facing the 31 October deadline for AI cyber action plans. Essential Reading Chief Operating Officers, Heads of Operational Resilience and Heads of Technology Risk in PRA regulated banks and insurers and

The COO 180 Day Plan Money is best spent where it narrows the gap between how long a critical service would really take to recover and how long the business can live without it. AI is now pushing on both ends of that gap. Risks versus Rewards Start with the cost. IBM's 2026 study puts the global average breach cost at $4.99m, up 12% on the year. For businesses that depend on physical operations, though, the average matters less than the worst case. Marks & Spencer lost hu

Global Developments in Operational Resilience, Third Party, Incident, AI and Cyber Regulation, and What They Mean for the Board. hello@armus2.com Executive Summary: Who should read this week's edition Most Affected this Week Chief Risk Officers, Heads of Technology and Risk, AI governance leads in Banking and Insuranc supervised by OSFI, the HKMA and FSB member authorities. UK operators of essential services, managed service providers and data centre operators. Essential Read

Our practical series continues in this third part of the series. Providing a practical goal is not to prevent every attack, it is to make sure that an attack cannot stop our critical business services. That approach reframes and removes the fear out of the subject and gives the COO the test that they can measure. The Five Disciplines, that Carry most of the Weight 1. Start from the Business, not the Network. Name the handful of services the business cannot fail at (taking ord

Every week, more than 50 regulators publish something that could change how you manage your resilience, third party risk, ai, business continuity and cyber. The Horizon Monitor tells you which changes matter, how urgent each one is, and what to do now versus what to prepare for, with links to the primary sources and a board ready summary. Ten minutes on a Monday instead of hours of scanning. Written for Chief Risk Officers, COOs, CISOs, Heads of Operational Resilience, Third

In the introduction to this series I explained why people believe the COO is the executive best placed to bring cyber into the fold. This second part looks at what 2026 has taught us, its makes the case for treating cyber as one part of operational resilience, and sets out six guidelines any COO can act on now. I have spent over twenty five years running on call incident and crisis management for clients, with a duty responders available around the clock. After any disruption

What is Cyber Resilience? This is the organisations ability to keep delivering its essential services through a cyber attack or technical failure and to recovery and adapt afterwards. In this coming series of briefings we reflect on the COO and the changing face of Cyber Resilience. Many organisations still treat cyber security as an IT problem that operations inherits when something goes wrong. But cyber is a specialist discipline that belongs inside the resilience governanc

Whilst many have been talking about Cyber, AI & Resilience, it was fantastic to see us delivering our knowledge and experience once again this week. Congratulations to Claudia and the team who have been busy helping customers succeed. After London, last week, we visited the beautiful Isle of Man helping to deploy yet another Armus2 solution of choice to a global international finance business. Connecting simple strategies to proactively monitor resilience across all its compo

Examining BCI's Resilience Report 2026

Ahead of the Curve: Asia Turned Resilience Competitive

The rise of the Chief Resilience Officer is changing Risk & Development

Armstrong's Ian Marsh, was previously Chief Operating Officer at Societe Generale in Europe and Asia. Whilst the Middle East reflects on a change on point, persistent geopolitical tensions from these regional 'proxy' conflicts have thrown more immediate economic ripples of instability in between Iran and her neighbours. Volatility is no longer episodic, but being streamed and consumed nightly, and in danger of being seen as structural. The UAE, and particularly Dubai, as its

Joining the Business Continuity Institute Global Conference in London this Tuesday, 11 November, we are taking part in a panel discussion on “From Chaos to Clarity: Crisis Leadership in an Uncertain World.” Across sectors and geographies, organisations are navigating escalating volatility: geopolitical disruption, cyber-threats, supply chain shocks, climate-driven events, reputational risk and societal instability. Crisis leadership has never been more critical — nor more com

As heavy investment in robust scenarios leaps - businesses reflect on the type of type of specialism which is hard to find, amongst a sea of pop up inexperienced suppliers.

As June begins announcing the start of summer, we are preparing to deliver a higher number of tailored simulations this month across no less than eight industry sectors. All of which includes a broad range of client skills and talents. Crisis Scenarios are widely recognised as the shortest route to maturing our ability to cope with stress when the unexpected happens. By exercising and testing strategies, theories and plans it provides people with the validation and experience

Business Continuity Awareness week 2025, from the Business Continuity Institute (BCI) has just drawn to a close. One of the biggest discussions this year was getting trusted help in a more complex environment. The Value of Experience Resilience—whether in business, community planning, or personal development—is not just about surviving challenges but thriving in the face of them. Organizations and individuals seeking expert guidance on resilience face critical choices: they s

We are confident that this is the open source future of Resilience, in Your Hands. Just ask some of our experienced industry piers.