◆ For risk & compliance practitioners
Risk and compliance templates built for financial services.
Risk and compliance frameworks and Excel templates built on SR 11-7, FFIEC, NIST AI RMF, and 20+ regulatory standards. Buy once, tailor to your program, deploy in days.
◆ Sign up for our newsletter — free weekly brief →Grounded in
SR 11-7 · FFIEC IT Examination Handbook · NIST AI RMF · OCC 2021-7 · ISO 31000
Exhibit A · BCP/DR — Business Impact Analysis
★ Bestseller · KRI Library dashboard
Inside the kit
14 templates · 20+ regulatory standards · Excel-native
20+
US regulatory standards
SR 11-7 · FFIEC · NIST AI RMF · OCC · CFPB
2,400+
Pages of guidance
Across every paid and free template
500+
Downloads
Risk & compliance practitioners
729
Briefings
Enforcement, analysis, frameworks
★ Bestsellers
Most popular picks.
The four most-downloaded templates this quarter. Real screenshots, real templates, ready to deploy.
#01 bestseller
KRI Library
132 Key Risk Indicators with thresholds, data sources, and escalation triggers.
#02 bestseller
New Product Risk Assessment
Pre-launch risk evaluation across compliance, operational, financial, and reputational lenses.
#03 bestseller
BCP/DR Kit (with BIA)
Full Business Continuity & Disaster Recovery kit including Business Impact Analysis.
#04 bestseller
Risk Register — Fintech Edition
141 pre-populated fintech risks across 21 categories. ISO 31000 structure.
◆ Ready to deploy
Templates & toolkits.
Built on real regulatory guidance — not someone's old employer's templates with the logo swapped out. Tailor in an afternoon.
Template
AI Risk Assessment Template & Guide
Comprehensive AI model governance and risk assessment templates for financial services teams.
Template
Issues Management Tracker & Template
End-to-end issues tracking and remediation management for risk and compliance teams.
Template
Financial Risk Management Kit
Credit risk, liquidity, concentration, and capital adequacy templates built for fintechs.
Template
Loss Monitoring & Event Tracking Kit
Basel-aligned operational loss event tracking and root cause analysis for financial services.
Template
RCSA (Risk & Control Self-Assessment)
141 pre-populated fintech risks with control assessments, questionnaire framework, and testing calendar.
Template
Data Privacy Compliance Kit
Multi-state privacy compliance templates covering 19 state laws plus GLBA and CCPA.
22 templates · 4 bundles · $49–$499
See all templates →★ Free · Delivered to your inbox
Start with the free frameworks.
Working introductory guides — read, evaluate, decide whether the full template is worth your money.
★ Free
AI Risk Assessment Guide
A free introductory guide to AI risk assessment for financial services teams.
Download →
★ Free
Issues Management Guide
A free introductory guide to building an effective issues management process.
Download →
★ Free
Risk Register — Fintech Edition
141 pre-populated fintech risks across 21 categories. ISO 31000 structure. Ready to use in a week.
Download →
★ Free
Threat Modeling for Agentic Payments
A 20,000-word whitepaper on threat modeling for AI-powered autonomous payment systems in financial services.
Download →
— Why this exists —
Built by a practitioner, for practitioners.
Every risk professional has done it. You join a new team, get asked to build a program from scratch, and end up calling a friend at your old company for their templates.
So I started publishing the analysis I wish I'd had — enforcement breakdowns, regulatory deep dives — and building the templates on actual regulatory guidance. The intelligence keeps you informed. The templates let you act on it.
Rebecca Leung
Editor & Founder · 8 years · Banks · Fintechs · BCG
◆ The Daily Brief
What we're tracking.
01 · Regulatory Compliance
SEC's $64 Million Croft & Frost Offering Fraud Case: The Warning Email Compliance Teams Cannot Ignore
The SEC's $64 million Croft & Frost offering fraud case shows how ignored warnings, sales incentives, and weak escalation controls compound losses.
SEP 14 · Rebecca
02 · Compliance Strategy
Your BSA/AML Compliance Program Can't Scale in Arrears: What the CFSB Consent Order Means for Every Fintech
In April 2026, the OCC issued a consent order against Community Federal Savings Bank — sponsor bank for Wise, Crypto.com, Airwallex, ChipperCash, and LemFi — for BSA/AML compliance failures so severe that its alert system was auto-closing a very high percentage of suspicious-activity flags. Here's what that means for the fintechs riding those rails, and what every fintech compliance team can learn about scaling a BSA program that doesn't collapse under its own transaction volume.
SEP 13 · Rebecca
03 · Third-Party Risk
IDScan.net Exposed 153 Million Driver's Licenses on the Dark Web. Your KYC Vendor's Breach Is Your CIP Problem.
On September 1, 2026, a dark web marketplace began advertising 153 million driver's license scans traced to IDScan.net, a KYC identity verification vendor. For any financial institution using third-party identity verification: this isn't IDScan's problem alone. Regulators hold you responsible for customer ID data wherever it flows.
SEP 13 · Rebecca