Use this before your weekly risk committee
One judgement, five ranked signals, and a board question built to travel straight into the pack.
Weekly risk intelligence for financial-services leaders
The Virtual Officer, from St Georges Strategy
What changed, why it matters, what to ask for next
Public signals, regulatory movement, and technology developments turned into executive judgement, board questions, and evidence to ask for. Built for senior risk, compliance, resilience, technology, and AI governance leaders in regulated financial services — for committee prep, horizon scanning, and control challenge.
1thing to care about
5top weekly signals
8signal streams tracked
2dated editions archived
Who this is for
Built for the people who own the risk
Senior risk, compliance, resilience, technology, and AI governance leaders in regulated financial services who need a weekly view of what matters, what is coming, and what evidence to ask for.
Chief Risk Officer
Chief Operating Officer
Chief Compliance Officer
Head of Operational Risk
CISO
AI governance lead
Resilience lead
This week in three lines
The judgement, the question, and the ask
Regulators landed on both sides of the AI risk story in the same week. This is the shortest possible version of what that means for a committee pack.
- The judgement
- Firms need one evidence base that shows AI is authorised, bounded, observable, reversible, and accountable for customer outcomes — and resilient against AI-accelerated attack.
- The board question
- Can we stop an agent quickly, prove why it acted, and show who owned the decision?
- What to ask for
- Inventory, permissions, kill switch, fallback, and rehearsed escalation — not just a policy document.
Use it for
Built to be used, not just read
Every part of The Virtual Officer is meant to travel somewhere specific: a committee pack, a governance forum, or a challenge session with a service owner.
Give the three questions to service owners
Consultation and deadline dates, each with an owner prompt attached before the window closes.
Ask for the permission map, not just the policy
Every signal resolves into a testable question a firm can put to an accountable owner.
Turn each deadline into an owner and a decision
Reg Horizon connects dates to the evidence trail that should exist before they close.
Latest brief / Week of 6 Jul 2026
Regulators land on both sides of the AI risk story
The FCA's first review of AI in retail financial services and the ESAs' warning on systemic cyber risk from frontier AI models arrived days apart. Firms need one evidence base that covers both conduct outcomes and cyber resilience.
- 01
FCA's first AI review puts retail outcomes and agentic control on the same page
- 02
Frontier AI models are now a declared systemic cyber risk, say the ESAs and ESRB
- 03
OFSI's largest-ever circumvention penalty resets sanctions control expectations
- 04
Bank of England's July Financial Stability Report resets the resilience and market baseline
- 05
A new UK legal duty on data protection complaints takes effect
Signals library
Eight streams, ranked and source-backed
Each stream carries a Top 5 shortlist and five more source-backed rows, with control prompts for the questions worth testing internally.
Agents and control
Permission boundaries, kill switches, and escalation evidence.
Failure paths
Fallback evidence and customer-visible impact.
Dependencies
What looks internal until it fails.
Structure
Capital, liquidity, and concentration risk.
Fraud and sanctions
Scams, AML, and control evidence.
Threats and response
Vulnerabilities, identity, and recovery.
Outages
Change failure and recovery evidence.
Lineage
Reporting, privacy, and evidence integrity.
Reg Horizon
What is coming, and who needs to own it
A weekly public-source scan of deadlines and consultations, turned into an owner prompt before the date arrives.
Why trust it
Source discipline, archived judgement, two decades of practice
The credibility comes from explicit judgement, not automation: primary sources are preferred, secondary reporting is labelled, and every issue is archived so the reasoning stays checkable.
Official sources first, secondary reporting labelled
Regulators, central banks, and standard setters are preferred; press and specialist reporting are marked as monitoring signal, not settled fact.
Every issue is dated and kept
The weekly brief, the eight signal streams, and Reg Horizon are all preserved so a reader can trace how the judgement changed over time.
Two decades in risk, compliance, and governance
Written by Ben St Georges, drawing on operational risk, audit, and governance leadership across financial institutions in Paris, Hong Kong, Tokyo, Montreal, and London.
Explore
The intelligence library
Move from the current weekly issue into forward-looking regulatory dates, ready-made committee questions, and the dated archive.
Topics
Eight topic streams with Top 5 shortlists and five more source-backed rows each.
Reg Horizon
Deadlines, consultations, owner prompts, and primary-source links.
Committee Questions
A running set of board-ready questions pulled from recent briefs.
Archive
Dated issues and topic pages preserved for review and comparison.