◆ For risk & compliance practitioners
Risk and compliance templates built for financial services.
Risk and compliance frameworks and Excel templates built on SR 11-7, FFIEC, NIST AI RMF, and 20+ regulatory standards. Buy once, tailor to your program, deploy in days.
◆ Sign up for our newsletter — free weekly brief →Grounded in
SR 11-7 · FFIEC IT Examination Handbook · NIST AI RMF · OCC 2021-7 · ISO 31000
Exhibit A · BCP/DR — Business Impact Analysis
★ Bestseller · KRI Library dashboard
Inside the kit
14 templates · 20+ regulatory standards · Excel-native
20+
US regulatory standards
SR 11-7 · FFIEC · NIST AI RMF · OCC · CFPB
2,400+
Pages of guidance
Across every paid and free template
500+
Downloads
Risk & compliance practitioners
593
Briefings
Enforcement, analysis, frameworks
★ Bestsellers
Most popular picks.
The four most-downloaded templates this quarter. Real screenshots, real templates, ready to deploy.
#01 bestseller
KRI Library
132 Key Risk Indicators with thresholds, data sources, and escalation triggers.
#02 bestseller
New Product Risk Assessment
Pre-launch risk evaluation across compliance, operational, financial, and reputational lenses.
#03 bestseller
BCP/DR Kit (with BIA)
Full Business Continuity & Disaster Recovery kit including Business Impact Analysis.
#04 bestseller
Risk Register — Fintech Edition
141 pre-populated fintech risks across 21 categories. ISO 31000 structure.
◆ Ready to deploy
Templates & toolkits.
Built on real regulatory guidance — not someone's old employer's templates with the logo swapped out. Tailor in an afternoon.
Template
AI Risk Assessment Template & Guide
Comprehensive AI model governance and risk assessment templates for financial services teams.
Template
Issues Management Tracker & Template
End-to-end issues tracking and remediation management for risk and compliance teams.
Template
Financial Risk Management Kit
Credit risk, liquidity, concentration, and capital adequacy templates built for fintechs.
Template
Loss Monitoring & Event Tracking Kit
Basel-aligned operational loss event tracking and root cause analysis for financial services.
Template
RCSA (Risk & Control Self-Assessment)
141 pre-populated fintech risks with control assessments, questionnaire framework, and testing calendar.
Template
Data Privacy Compliance Kit
Multi-state privacy compliance templates covering 19 state laws plus GLBA and CCPA.
22 templates · 4 bundles · $49–$499
See all templates →★ Free · Delivered to your inbox
Start with the free frameworks.
Working introductory guides — read, evaluate, decide whether the full template is worth your money.
★ Free
AI Risk Assessment Guide
A free introductory guide to AI risk assessment for financial services teams.
Download →
★ Free
Issues Management Guide
A free introductory guide to building an effective issues management process.
Download →
★ Free
Risk Register — Fintech Edition
141 pre-populated fintech risks across 21 categories. ISO 31000 structure. Ready to use in a week.
Download →
★ Free
Threat Modeling for Agentic Payments
A 20,000-word whitepaper on threat modeling for AI-powered autonomous payment systems in financial services.
Download →
— Why this exists —
Built by a practitioner, for practitioners.
Every risk professional has done it. You join a new team, get asked to build a program from scratch, and end up calling a friend at your old company for their templates.
So I started publishing the analysis I wish I'd had — enforcement breakdowns, regulatory deep dives — and building the templates on actual regulatory guidance. The intelligence keeps you informed. The templates let you act on it.
Rebecca Leung
Editor & Founder · 8 years · Banks · Fintechs · BCG
◆ The Daily Brief
What we're tracking.
01 · Compliance Strategy
Bank Holding Company Source-of-Strength: What Fintechs Getting Bank Charters Haven't Accounted For
When a fintech gets a bank charter and forms a bank holding company, it inherits the source-of-strength obligation — a capital backstop requirement most fintech BHC playbooks don't address. The TS Banking Group July 2026 written agreement shows what happens when this surfaces at exam time.
JUL 30 · Rebecca
02 · Regulatory Compliance
The Exodus OFAC Settlement: What a $3.1M Crypto Wallet Enforcement Action Teaches About Sanctions Compliance Programs
OFAC's December 2025 settlement with Exodus Movement — $3.1 million for 254 apparent violations of the Iranian Transactions and Sanctions Regulations — is the clearest statement yet that non-custodial crypto wallets are in scope for sanctions obligations. The finding that staff advised Iranian users to use VPNs is the detail that turns a compliance failure into an egregious one.
JUL 30 · Rebecca
03 · Compliance Strategy
Federal Reserve Regulation O Proposal: Rebuild the Control Logic, Not Just the Limits
The 2026 Regulation O proposal raises insider-lending thresholds and changes passive-fund treatment. Here is the bank control impact.
JUL 30 · Rebecca