Latest Blog Articles

Read the Latest Blog Posts
Knowledge. Useful. Quick. 


Stay up-to-date by reading useful articles from industry thought leaders who tackle common challenges and discuss current or proposed industry regulations.

  • Knowing when and how to run a business continuity plan (BCP) tabletop test isn’t just about checking a box — it’s what ensures your team is ready when a real crisis hits. In my 30+ years in business continuity, I’ve seen the impact of successful tabletop testing. In one session, a client realized their “mobile branch” backup plan was just an empty trailer with no equipment or connectivity. In another example, IT discovered it was short 75 VPN licenses — months before COVID forced everyone to work from home. These weren’t minor details; they were gaps that could have left these financial institutions (FIs) unable to operate during a real crisis. Tabletop testing forces your organization to answer tough questions, uncovering blind spots you’d otherwise never see, so you can fix them before they become real problems. But how exactly does a tabletop test work? What are the essential elements? Let’s dive in.
  • Stay up to date on the latest vendor risk management news happening this month. Check out the articles below.
  • Data poisoning is a cyberattack where attackers manipulate or corrupt training — often involving artificial intelligence (AI) systems — to undermine model performance and security. Recent research shows that poisoning as little as 7-8% of training data can cause significant failures. As AI becomes integral to daily operations, data poisoning is emerging as a critical risk. For financial institutions that rely on AI for credit decisions, fraud detection, and compliance monitoring, even small manipulations can distort outcomes, expose sensitive data, and spark regulatory or reputational fallout. To stay ahead of evolving threats, organizations must strengthen defenses, safeguard data, and continuously refine their cybersecurity practices.
  • Welcome to the December Enforcement Actions Roundup — our monthly look at the enforcement activity from the past month, what went wrong, and what financial institutions (FIs) can learn from it.   This roundup features two key resources:  
  • November 2025 marked a turning point in the regulatory environment as the Consumer Financial Protection Bureau (CFPB) confronted a potential shutdown while restarting examinations under its new “Humility in Supervision” approach. From proposed changes to Section 1071 and fair lending oversight to the end of penny production after 232 years, financial institutions (FIs) are operating in a reshaped supervisory landscape — one where federal oversight may be pulling back, but compliance expectations and institutional risk remain firmly in place. Get our experts’ thoughts on this month’s headlines in our Reg Update podcast. For resources and regulatory analyses on the topics discussed, check your Ncomply solution.
  • NASHVILLE, Tenn., Dec. 9, 2025 -- Ncontracts , the leading provider of integrated compliance, risk, and vendor management solutions to the financial services industry, today announced the release of "The Future of Compliance: Benchmarking the People, Processes, and Pressures Shaping Compliance in 2026," a comprehensive survey examining how financial institutions are navigating evolving compliance expectations and regulatory complexity.
  • Financial institutions are under pressure as regulatory uncertainty and emerging risks — from AI governance to escalating cybersecurity threats — collide with limited staffing and resources. These are just a few of the takeaways from The Ncontracts 2026 Future of Compliance Survey — a new survey report featuring insights from over 180 banks, credit unions, and mortgage companies with assets from under $250 million to more than $10 billion. Whether you work in compliance, risk management, or operations, these insights will help you benchmark your compliance program against industry best practices, better understand emerging risks, and evolve your compliance program to meet the demands of a changing regulatory landscape.
  • Are you maximizing your policies as governance tools?
  • Risk management and compliance never stand still — neither do we. With Ncontracts’ Knowledge as a Service (KaaS) approach, you always have the latest content and regulatory insights at your fingertips.