Regulation and compliance

News on regulations and compliance requirements driving developments in software quality engineering at financial firms.

Part II: How regulators are testing their way into AI governance

Part II explores how how QA functions are now practical enforcement mechanisms for AI governance...

UK’s FCA launches live testing to help banks move AI from pilots to production

The FCA’s move lands alongside broader regulatory pressure on testing and resilience...

DORA one year on: Banks grapple with operational resilience testing

QA teams are emerging as key players in ensuring compliance with DORA’s expanded scope...

‘Past approaches to resilience testing no longer work’, warns Spirent VP

Anil Kollipara says automated network testing now sits at the centre of banks' risk management...

US threat-sharing law extension buys time for banks to close testing gaps

US lawmakers have extended the CISA regulation by nine months while Congress debates replacement...

European Data Protection Day puts spotlight on synthetic datasets

January 28 is European Data Protection Day 2026, marked each year across EU institutions...

Holland’s DNB tells banks to turn scenario testing into core assurance tool

DNB in Amsterdam is urging banks to prove digital resilience through scenario-based testing...

Davos 2026: Banks’ digital resilience in focus at World Economic Forum

The WEF highlighted the importance of resilience-by-design in financial services’ digital systems...

UK banks told to strengthen AI testing as British MPs flag systemic risks

Banks face pressure to strengthen AI software testing as concerns grow over systemic risks...

World Economic Forum: AI-driven fraud a major risk for banks

Banks face a new convergence of fraud risk, regulatory scrutiny and digital resilience expectations...

World Economic Forum warns financial sector must strengthen AI risk controls

The WEF says regulatory expectations around AI compliance are no longer abstract...
The HQ of Barclays in Canary Wharf, London

Banks will face a hard truth in 2026: Early security checks are no longer enough

For Craig Nielsen, the traditional model of 'shift-left' security testing is no longer enough...