Resources
Regulatory intelligence and practitioner guides for risk, compliance and change leaders in regulated firms — mostly ungated.
Updated monthly · last briefing Jun 2026
No gate on the content · unsubscribe anytime
Regulatory intelligence
Briefings 01–04
The Digital Operational Resilience Act reframes ICT change as a resilience question. Here's what that means for how you approve and evidence it.
7 min · Jun 2026
Draft · SME review before publication
The Duty asks firms to show, not assert, that changes deliver good customer outcomes. The burden lands on your change record.
6 min · May 2026
Draft · SME review before publication
Senior-manager accountability is only as strong as the record behind it. When a change fails, the question is who owned the decision — and whether you can show it.
5 min · May 2026
Draft · SME review before publication
APRA's operational-risk standard expects controls to be identified, tested, and tied to the services they protect. Change is where that mapping gets tested.
6 min · Apr 2026
Draft · SME review before publication
Practitioner library
A practical pattern for gates that produce evidence as a by-product of doing the work — not as a separate compliance task.
Draft structure · replace with the full playbook once written
A starting structure for mapping your controls to the obligations they satisfy and the changes that touch them.
Draft · provide the file before linking
What a skilled-person review tends to ask for, and how to have it ready before the request lands.
Draft · expand with specifics and SME review before publication
The briefing
A short monthly read for risk, compliance and change leaders in regulated firms.
No gate on the content · unsubscribe anytime