The ORX Operational Risk Podcast

In this episode, we explore the key themes shaping the operational risk landscape based on ORX News coverage in Q1 2026. Alongside the latest loss data and major events, we look at how industry priorities compare with realised losses, highlighting gaps between perception and experience in areas such as conduct, cyber and third-party risk. We also examine developments in external fraud, cyber incidents and regulatory change, including the UK motor finance redress scheme. Taken together, these insights help build a clearer picture of where risks are emerging and how firms are responding. Related resources ORX News Top 5s Data Deep Dive: External Fraud Deep Dive: Jaguar Land Rover cyberattack severely disrupts production Global Public Loss Landscape Report 2025 Motor Finance Commission Disclosure Failures Analysis

In this episode, we explore how firms are rethinking and strengthening their approaches to controls. Drawing on findings from our recent research, we discuss the progress many firms have made in putting solid foundations in place, including standardising and rationalising control data, developing central control libraries and bringing greater clarity to control definitions and prioritisation. We also look ahead to what comes next, with a growing focus on real‑time monitoring, better use of data and stronger connections across risk and resilience, supported by automation and AI to drive better insight, decision‑making and resilience. This episode features Helen Labbate, Deputy Director – Research and Information, Emilie Odin, Senior Research Manager and Abi Jones, Assistant Research Manager.   Related resources ORX Reference Control Library Controls practices: Trends, insights and industry progress Control library practice discussions ORX Reference Control Library Refresh Initiative

In this episode of the ORX Operational Risk Podcast, Steve Bishop, Research and Information Director, is joined by Helen L’Abbate, Research and Information Deputy Director and Nikki Truss‑West, Research Senior Manager, to discuss findings from the 2026 Operational Risk Horizon and Cyber Horizon studies. The research explores why Horizon feels closer, how cyber threats are evolving, and what firms can do now to strengthen resilience. What we cover in this episode: Agility and resilience: What risk teams need today Cyber Horizon 2026: What’s changing.   Interconnectivity: How risks influence one another   How firms are using the Horizon report Episode Resources: ORX members and ORX Lite subscribers can read our full version of the Operational Risk Horizon 2026 report here: https://orx.org/resource/operational-risk-horizon-2026. Non-members can download a free summary of our report to find out more: https://orx.org/download/operational-horizon-risk-2026?hsCtaAttrib=206975921927. Available for all, find out more about Horizon by reading our blogs: Operational Risk Horizon in 2026: Emerging threats and industry priorities: https://orx.org/blog/operational-risk-horizon-in-2026-emerging-threats-and-industry-priorities Uncertainty dominates operational risk planning in the finance sector: https://orx.org/blog/uncertainty-dominates-operational-risk-planning-finance   ORX Cyber subscribers can access the full Cyber Horizon 2026 report here: https://orx.org/resource/cyber-horizon-2026.

In this episode of the ORX Operational Risk Podcast, Helen L’Abbate, Deputy Director of Research and Information, is joined by Emilie Odin and Nikki Truss‑West, ORX Research Senior Managers, to unpack how digital transformation, new customer expectations, tighter margins and modern operating models have accelerated firms’ reliance on external suppliers. Drawing on insights from the Third Party Ecosystem Risk Management practice paper and the Third Party Cyber Risk Oversight and Assessment 2025 report, the discussion translates emerging risks and community insights into practical, actionable guidance for risk teams. Listen in as we explore what’s behind the surge in third‑party relationships, the cyber and resilience risks created by increasingly complex supply chains, and the steps firms are taking to strengthen oversight across both TPRM and cyber functions. Topic highlights:  What third‑party ecosystem really means What’s driving the rapid expansion The risks created by the expanding ecosystem How ORX members are evolving their TPRM frameworks A first look at ORX’s 2026 third‑party deliverables Episode resources Available to ORX members  Third Party Ecosystem Risk Management paper: https://orx.org/resource/third-party-ecosystem-risk-management-2025 Third Party Ecosystem Risk Initiative: https://orx.org/project/third-party-ecosystem-risk-initiative Insurance sector review of navigating third party risk management blog: https://orx.org/blog/insurance-sector-review-of-navigating-third-party-risk-management Blog - Third party risk management: Summary of LeadersConnect discussions: https://orx.org/blog/third-party-risk-management-summary-discussions Available to ORX Cyber subscribers Third Party Cyber Risk Oversight & Assessment report: https://orx.org/resource/third-party-cyber-risk-oversight-and-assessment-2025 Blogs available to everyone BCBS third-party risk principles: What you need to know: https://orx.org/blog/bcbs-third-party-risk-principles-what-you-need-to-know Embedding TPRM in business strategy: Seven steps to success: https://orx.org/blog/bcbs-third-party-risk-principles-what-you-need-to-know EBA finalises new operational risk event taxonomy: https://orx.org/blog/eba-finalises-new-operational-risk-event-taxonomy Third Party Ecosystem Risk Initiative: Key TPRM challenges revealed: https://orx.org/blog/third-party-ecosystem-risk-key-challenges Geopolitics, AI and third parties drive surge in op risk materiality: https://orx.org/blog/geopolitics-ai-and-third-parties-drive-surge-in-op-risk-materiality To find out more about ORX Membership, ORX subscription services, and access other operational risk resources, just search ‘ORX’ or visit: www.orx.org.

Listen to this episode of the ORX Operational Risk Podcast to hear the ORX News team cover the top five largest operational risk losses of December 2025, the latest top 10 most viewed stories including CME Group’s trading disruption, a deep dive into the global service outage at AWS, and some service updates. You can find the top 5 largest operational risk losses of December 2025 discussed in this episode on our website at: https://orx.org/blog/top-5-orx-news-losses-december-2025 ORX News subscribers can find out more on the top 10 most viewed loss events of December 2025 on the ORX News website here: https://news.orx.org/node/13678 ORX News subscribers can read the full story on CME Group’s trading disruption as well as the full deep dive on the AWS global service outage via the ORX News website at: https://news.orx.org/node/13617 and https://news.orx.org/node/13619 ORX News and ORX Cyber subscribers can access the latest Cyber Operational Risk Event Round-ups on our website here: https://orx.org/cyber-operational-risk-event-round-ups-2025 To find out more about ORX News, ORX Cyber and other ORX services, or to access further operational risk resources, just search ‘ORX’ or visit: www.orx.org.