◆ The Daily Brief
Enforcement actions, regulatory deep dives, and the frameworks worth your time. Updated weekdays. 617+ articles in the archive.
● Live · Updated daily
SEC · DOJ · OCC · FFIEC enforcement
Breaking Regulatory Compliance
The SEC Financial Reporting and Accounting Unit puts specialist scrutiny back on accounting fraud, ICFR, audit evidence, and auditor conduct.
By Rebecca Leung · Aug 5, 2026
◆ Models · Governance · NIST AI RMF
Long form · Updated weekly
Feature · AI Risk
A June 2026 survey found 72% of banks are unprepared to shut down a malfunctioning AI model or report an AI failure to regulators—the two most basic controls in any AI incident-response playbook. OCC and Fed examiners have made AI a permanent standing topic in every routine bank examination. Here's what kill switch documentation, vendor disentanglement testing, and data boundary enforcement look like when an examiner walks in.
By Rebecca Leung · Jul 31, 2026
◆ RCSA · KRIs · TPRM · Compliance Strategy
Frameworks · Deep dives
Feature · Compliance Strategy
The SEC ended its off-channel enforcement wave after 95 cases and $2.3 billion in penalties. FINRA didn't follow. While the SEC pivoted to fraud and fiduciary cases, FINRA fined BTIG $600,000 and started barring individuals from the industry. Here's what the divergence means for broker-dealer compliance programs.
By Rebecca Leung · Aug 6, 2026
◆ Data privacy laws · Incident response
State laws · IR playbooks
Feature · Data Privacy
On April 29, 2026, NYDFS issued a $2.25 million consent order against Delta Dental of New York—its first 2026 cybersecurity enforcement action. The underlying breach was a 2023 MOVEit zero-day. The violations were late notification, inadequate data disposal, and insufficient incident response plan detail. And the consent order bars insurance reimbursement. Here's what the enforcement record tells your program.
By Rebecca Leung · Aug 2, 2026
◆ BCP · DR · Operational continuity
BCP · Disaster recovery
Feature · Business Continuity
On July 31, 2026, the ECB published results of its thematic geopolitical risk reverse stress test covering 110 directly supervised euro area banks—and urged the sector to improve. The OCC's Spring 2026 Semiannual Risk Perspective added geopolitical risk as a prominent new concern for the first time. Most US bank business continuity programs are built for IT failures and natural disasters. They are not built for this class of scenario.
By Rebecca Leung · Jul 31, 2026