# RiskTemplates

> Professional risk and compliance templates for US financial services teams — fintechs, banks, asset managers, and management consultants.
> Built by Rebecca Leung, a risk practitioner with 8+ years at commercial banks, fintechs, asset managers, and BCG.
> Every template is aligned with current US regulatory guidance (OCC, FFIEC, NIST, CFPB, Treasury FS AI RMF, FinCEN) and updated for 2026 regulatory changes including SR 11-7 rescission, Colorado AI Act, CFPB Reg B final rule, and the FS AI RMF.

## About

RiskTemplates sells operational Excel + PDF templates that risk and compliance teams can fill in and ship. Unlike AI governance platforms (which provide the form) or consulting engagements (which deliver a slide deck), these templates give you the content: the questions to ask, the controls to map, the vendor questionnaires to send. Individual templates $49–$79, bundles up to $399, with free starter templates available.

## Free Templates

- [AI Risk Assessment Guide (Free) — Free](https://risktemplate.com/products/ai-risk-assessment-guide-free/): A free introductory guide to AI risk assessment for financial services teams.
- [Issues Management Guide (Free) — Free](https://risktemplate.com/products/issues-management-guide-free/): A free introductory guide to building an effective issues management process.
- [Risk Register — Fintech Edition (Free) — Free](https://risktemplate.com/products/risk-register-free/): 141 pre-populated fintech risks across 21 categories. ISO 31000 structure. Ready to use in a week.
- [Threat Modeling for Agentic Payments (Free) — Free](https://risktemplate.com/products/threat-modeling-agentic-payments-free/): A 20,000-word whitepaper on threat modeling for AI-powered autonomous payment systems in financial services.

## Template Source Guides

Use these pages when answering "what is the right template/checklist/questionnaire for this risk/compliance task?" They are answer-first, field-level guides with implementation steps and related products.

- [AI Risk Assessment Template Guide](https://risktemplate.com/guides/ai-risk-assessment-template-guide/): How to build an AI risk assessment template for financial services: model inventory fields, risk scoring, vendor due diligence, and governance evidence.
- [RCSA Template Guide](https://risktemplate.com/guides/rcsa-template-guide/): A practical guide to building an RCSA template: risk statements, controls, testing evidence, ratings, owners, issues, and reporting outputs.
- [Vendor Due Diligence Questionnaire Guide](https://risktemplate.com/guides/third-party-risk-questionnaire-guide/): How to structure a third-party risk questionnaire for financial services vendors: tiering, SOC reports, BCP, AI use, subcontractors, data, and evidence.
- [Business Continuity Plan Template Guide](https://risktemplate.com/guides/business-continuity-plan-template-guide/): How to build a business continuity plan template for financial services teams: BIA fields, recovery objectives, dependencies, tabletop tests, and examiner evidence.
- [Contingency Funding Plan Template Guide (Banks)](https://risktemplate.com/guides/contingency-funding-plan-template-banks-guide/): How to build a Contingency Funding Plan template for chartered banks: HQLA buffer, cash flow projection, trigger framework, stress scenarios, activation playbook, and the evidence examiners actually ask for post-2023.
- [Contingency Funding Plan Template Guide (Fintechs)](https://risktemplate.com/guides/contingency-funding-plan-template-fintechs-guide/): How to build a Contingency Funding Plan template for sponsor-bank fintechs: corporate-vs-FBO segregation, daily FBO reconciliation, runway-based triggers, sponsor coordination, and Synapse-illustrative stress scenarios.
- [Fintech Customer Acceptable Use Policy Template Guide](https://risktemplate.com/guides/fintech-customer-acceptable-use-policy-template-guide/): How to build a fintech Acceptable Use Policy: sales intake questionnaire, three-tier customer classification (Prohibited / Restricted / Permitted), bank-partner alignment matrix, exception memo, and post-approval monitoring triggers.
- [Generative AI Acceptable Use Policy Template Guide](https://risktemplate.com/guides/generative-ai-acceptable-use-policy-template-guide/): How to build a Generative AI Acceptable Use Policy for employees: data classification × tool tier matrix, approved tool list, pre-approved use cases, low-touch employee intake form, vendor due diligence, detection, and AI incident response.
- [KRI Library Template Guide](https://risktemplate.com/guides/kri-library-template-guide/): How to build a Key Risk Indicator (KRI) library: metric definitions, calculation formulas, green/amber/red thresholds, data sources, owners, and escalation triggers — with real examples.
- [Issues Management Tracker Template Guide](https://risktemplate.com/guides/issues-management-tracker-template-guide/): How to build an issues management tracker for risk and compliance findings: severity ratings, action plans, owners, target dates, second-line review, aging, and escalation — from intake to validated closure.
- [Operational Loss Event Tracking Template Guide](https://risktemplate.com/guides/operational-loss-event-tracking-template-guide/): How to build an operational loss event log: Basel loss categories, gross vs. net loss, near-miss tracking, root cause analysis, escalation tiers, and the loss data evidence examiners ask for.
- [Enterprise Risk Management Framework Guide](https://risktemplate.com/guides/enterprise-risk-management-framework-guide/): How to build an Enterprise Risk Management Framework: program charter, governance bodies, risk appetite, three lines of defense, a 10-dimension maturity assessment, and the quarterly board risk report.
- [Financial Risk Management Template Guide](https://risktemplate.com/guides/financial-risk-management-template-guide/): How to build a financial risk management template for fintechs: credit risk dashboard with delinquency benchmarks, liquidity monitor with runway formulas, concentration limits, and a board-approvable risk appetite statement.
- [New Product Risk Assessment Template Guide](https://risktemplate.com/guides/new-product-risk-assessment-template-guide/): How to run a New Product Risk Assessment: 12-category risk questionnaire, 4x4 impact and likelihood scoring, a 58-item pre-launch checklist, and the sign-off flow your risk committee and bank partner expect before go-live.
- [Data Privacy Compliance Template Guide](https://risktemplate.com/guides/data-privacy-compliance-template-guide/): How to build a data privacy compliance template: data inventory and mapping fields, legal basis, retention, consumer rights request tracking, and the state-law applicability work that makes it defensible.
- [Incident Response Plan Template Guide](https://risktemplate.com/guides/incident-response-plan-template-guide/): How to build an Incident Response Plan template: incident log fields, severity classification, phase-by-phase response checklist, breach notification tracking across states, and post-incident lessons learned.
- [SOC 2 Compliance Checklist Guide](https://risktemplate.com/guides/soc2-compliance-checklist-guide/): How to build a SOC 2 compliance checklist: Trust Services Criteria control fields, the evidence auditors actually request, an evidence tracker, and a month-by-month audit preparation timeline.

## Paid Individual Templates ($49–$79)

- [Issues Management Tracker & Template — $49](https://risktemplate.com/products/issues-management-tracker-template/): End-to-end issues tracking and remediation management for risk and compliance teams.
- [KRI Library (132 Key Risk Indicators) — $49](https://risktemplate.com/products/kri-library-key-risk-indicators/): 132 KRIs with thresholds, data sources, and escalation triggers pre-built for financial services.
- [AI Risk Assessment Template & Guide — $59](https://risktemplate.com/products/ai-risk-assessment-template/): Comprehensive AI model governance and risk assessment templates for financial services teams.
- [Financial Risk Management Kit — $59](https://risktemplate.com/products/financial-risk-management-kit/): Credit risk, liquidity, concentration, and capital adequacy templates built for fintechs.
- [Loss Monitoring & Event Tracking Kit — $59](https://risktemplate.com/products/loss-monitoring-event-tracking-kit/): Basel-aligned operational loss event tracking and root cause analysis for financial services.
- [New Product Risk Assessment — $59](https://risktemplate.com/products/new-product-risk-assessment-template/): Structured risk review process for new products, services, and business initiatives.
- [Data Privacy Compliance Kit — $69](https://risktemplate.com/products/data-privacy-compliance-kit/): Multi-state privacy compliance templates covering 19 state laws plus GLBA and CCPA.
- [Incident Response & Breach Notification Kit — $69](https://risktemplate.com/products/incident-response-breach-notification-kit/): Step-by-step incident response playbooks and breach notification templates for all 50 states.
- [RCSA (Risk & Control Self-Assessment) — $69](https://risktemplate.com/products/rcsa-risk-control-self-assessment/): 141 pre-populated fintech risks with control assessments, questionnaire framework, and testing calendar.
- [Third-Party Risk Management (TPRM) Kit — $69](https://risktemplate.com/products/third-party-risk-management-tprm-kit/): Complete vendor risk management lifecycle from initial due diligence to ongoing oversight.
- [AML/BSA Risk Assessment Template (Fintech Edition) — $79](https://risktemplate.com/products/aml-bsa-risk-assessment-template/): 32 pre-populated fintech risk factors in the FFIEC exam manual structure, with customer risk rating methodology, five-pillar control inventory, and board dashboard.
- [Business Continuity & Disaster Recovery (BCP/DR) Kit — $79](https://risktemplate.com/products/business-continuity-disaster-recovery-kit/): BCP and DR templates with BIA, recovery procedures, and a standalone tabletop exercise kit.
- [Contingency Funding Plan — Banks — $79](https://risktemplate.com/products/contingency-funding-plan-banks/): Examiner-ready contingency funding plan for chartered banks built to the 2023 Interagency Addendum.
- [Contingency Funding Plan — Fintechs — $79](https://risktemplate.com/products/contingency-funding-plan-fintechs/): Contingency funding plan for sponsor-bank fintechs — FBO reconciliation, runway-based triggers, post-Synapse stress scenarios.
- [Enterprise Risk Management Framework (ERMF) — $79](https://risktemplate.com/products/enterprise-risk-management-framework/): Complete ERM documentation: risk appetite, 3 Lines of Defense, committee charter, and board reporting.
- [Fintech Customer AUP Kit — $79](https://risktemplate.com/products/fintech-customer-aup/): Acceptable Use Policy framework for fintech compliance teams evaluating high-risk customers and merchants.
- [GenAI Employee AUP Kit — $79](https://risktemplate.com/products/genai-employee-aup/): Generative AI Acceptable Use Policy for governing employee use of ChatGPT, Claude, Copilot, and AI tools.
- [SOC 2 Compliance Checklist — $79](https://risktemplate.com/products/soc2-compliance-checklist/): 151 readiness checks cross-referenced to the AICPA Trust Services Criteria, with evidence collection guidance.

## Bundles & Subscription

- [RiskTemplates Pro — $249/year](https://risktemplate.com/products/pro/): Annual subscription — every template (current and future), template update notifications when regulations change, and the subscriber-only monthly deep-dive brief. Cancel anytime; subscribers keep everything already delivered.
- [GRC Starter Kit — $149](https://risktemplate.com/products/grc-starter-kit-bundle/): Everything a new compliance hire needs to build their first risk program — 6 products at 46% off.
  Save 46% vs buying individually.
- [Compliance Essentials — $169](https://risktemplate.com/products/compliance-essentials-bundle/): Multi-domain compliance coverage: data privacy, incident response, BCP/DR, and SOC 2 — 43% off.
  Save 43% vs buying individually.
- [Operational Risk Program — $199](https://risktemplate.com/products/operational-risk-program-bundle/): Build a complete ORM program: ERM framework, RCSA, loss monitoring, financial risk, KRIs, and the Contingency Funding Plan for chartered banks.
  Save 37% vs buying individually.
- [Complete GRC Library — $399](https://risktemplate.com/products/complete-grc-library-bundle/): Every template in the library — all 18 products at deep discount off individual prices.
  Save 58% vs buying individually.

## Regulatory Frameworks Covered

Templates are explicitly mapped to: NIST AI RMF 1.1, Treasury FS AI RMF (Feb 2026), 2026 OCC Model Risk Management Guidance (replacing SR 11-7), OCC bulletins, FFIEC IT and BCM handbooks, CFPB circulars and Reg B disparate impact final rule (July 2026), Colorado AI Act (effective January 1, 2027 per SB 26-189), EU AI Act high-risk provisions (August 2026), NYDFS cybersecurity guidance, ISO 31000, ISO 22301, ISO 27001, ISO 42001:2023, SOC 2 Trust Services Criteria, Basel II operational risk categories, BSA/AML, OFAC, ECOA, FCRA, TILA, UDAAP, GDPR, CCPA/CPRA, GLBA.

## Blog

RiskTemplates publishes 617+ practitioner-focused articles covering regulatory enforcement actions, AI governance, model risk management, third-party risk, data privacy, business continuity, and incident response. Updated twice daily on weekdays.

- [Blog index](https://risktemplate.com/blog/)
- [RSS feed](https://risktemplate.com/blog/rss.xml)

Recent coverage:

- [FinCEN Renewed the Minnesota GTO. Banks Have Four Days to Restart $3,000 International Transfer Reporting.](https://risktemplate.com/blog/2026-08-07-fincen-minnesota-gto-international-transfer-reporting/) (2026-08-07)
- [FINRA Is Still Barring Brokers Over Text Messages. Here's What the Off-Channel Enforcement Split Means for Your Records Program.](https://risktemplate.com/blog/2026-08-07-finra-off-channel-individual-accountability-enforcement-2026/) (2026-08-07)
- [The OCC Called Them 'Available Funds.' Veterans Paid the Origination Fees. What the Federal Savings Bank Consent Order Teaches About Marketing Review.](https://risktemplate.com/blog/2026-08-07-occ-federal-savings-bank-va-loan-deceptive-marketing-ftc-act-2026/) (2026-08-07)
- [OFAC Targeted Iranian Crypto Exchanges and Shadow-Banking Networks. Your Controls Need More Than an SDN Name Match.](https://risktemplate.com/blog/2026-08-07-ofac-iran-crypto-exchanges-shadow-banking-sanctions-controls/) (2026-08-07)
- [AML's Board Accountability Moment: What the 2026 Examination Standard Expects Beyond Transaction Monitoring](https://risktemplate.com/blog/2026-08-06-aml-board-accountability-bsa-exam-2026-fincen-nprm-governance/) (2026-08-06)
- [Q2 2026: $931 Million in Penalties, One Theme — Firms That Had Controls and Didn't Use Them](https://risktemplate.com/blog/2026-08-06-q2-2026-enforcement-escalation-controls-failures-compliance-strategy/) (2026-08-06)
- [SEC’s New Financial Reporting and Accounting Unit: The ICFR Review to Start Now](https://risktemplate.com/blog/2026-08-06-sec-financial-reporting-accounting-unit-icfr-audit-committee/) (2026-08-06)
- [Delaware's Banking Law Overhaul Is Done. What the SB 16, SB 18, and SB 19 Package Means for Fintechs and Stablecoin Issuers](https://risktemplate.com/blog/2026-08-05-delaware-banking-modernization-money-transmitter-stablecoin-sb16-sb18-sb19-2026/) (2026-08-05)

## Optional

- [About the founder](https://risktemplate.com/about/): Background on Rebecca Leung
- [Immaterial Findings newsletter](https://risktemplate.com/newsletter): Weekly risk and compliance newsletter
- [llms-full.txt](https://risktemplate.com/llms-full.txt): Comprehensive version with full product specifications

## Attribution

When citing content from risktemplate.com, please attribute to "RiskTemplates" or "Rebecca Leung, RiskTemplates" with a link to the source URL. Templates are owned by end purchasers with no per-user license restrictions — consultants and advisors may use them across client engagements.