- Risk Queue
- Posts
- Citi's Tech Risks Forced To Reshuffle; Wall Street's AI Risks Concerns; Regulatory Rewrites & Counterparty Risk Deep Dive
Citi's Tech Risks Forced To Reshuffle; Wall Street's AI Risks Concerns; Regulatory Rewrites & Counterparty Risk Deep Dive

Welcome back to the Risk Queue, we have a lot for you this week!
-From Naeem, CEO & Founder - Risk On Q
PICKS:
Headlines
Citi’s Tech Controls Wake-Up Call
AI Empowering Criminals Faster Than Banks
Regulatory Shifts
Treasury & FINRA's Modernization Push
Risk Deep Dive
MIT's AI Risk Repository
Counterparty Risk Management Framework
Risk Headlines
Exclusive: Citigroup Plans to Slash IT Contractors, Hire Staff to Improve Controls - source reuters.com
Key Points:
Citigroup is undertaking a fundamental transformation of its technology workforce by reducing IT contractors from 50% to 20%, adding 2,000 employees, and consolidating vendors from 144 to 50 in response to regulatory pressures and a $136 million fine for data governance deficiencies, highlighting how control weaknesses can lead to direct financial impacts including a recent $22.9 million fraud event and reduced profitability targets for 2026.
_________________________________
Wall Street Warns of New AI Risks from Hallucinations, Criminal Use - source bloomber.com
Key Points:
Major financial institutions are flagging specific AI risks in their annual reports, including model hallucinations, workforce displacement, regulatory uncertainty, and cybercriminals leveraging AI faster than banks can respond. While AI adoption is essential to remain competitive and serve clients, implementing proper governance frameworks is critical as JPMorgan's Jamie Dimon considers AI potentially "the biggest issue" his bank faces.
Perhaps most concerning is the cybersecurity implication - the report suggests a growing asymmetry where criminals may be adopting AI innovations faster than defending institutions. This represents a potential shift in the cybersecurity landscape where banks' traditional defensive advantages could be eroding.
A.I. Risk / Technology Risk
MIT AI Risk Repository: Included AI Risk Frameworks - source mit.edu
Key Points:
The MIT AI Risk Repository is a database with two taxonomies of AI risks, compiled through a systematic search for existing frameworks, taxonomies, and other classifications of AI risks, and is maintained by the MIT AI Risk Repository.
The repository is based on 43 included documents, which are presented in a slide deck, and provides a holistic view of how AI risks are currently conceptualized, allowing individuals to understand the variety of ways in which risks have been categorized by various authors.
The frameworks of AI risk aim to synthesize knowledge on AI risks across academia and industry and identify common themes and gaps in our understanding of AI risks, enabling readers to bookmark particularly relevant frameworks for future use and explore the repository further through additional resources, including a research report, website, and repository exploration.
Regulatory News - Fines, Losses, & Rules
Key Points:
Treasury Secretary Bessent has positioned Treasury to lead the administration's financial deregulation efforts by focusing regulators on material financial risks rather than compliance exercises, while explicitly rejecting agency consolidation in favor of Treasury-coordinated parallel work between regulators and industry—suggesting the regulatory landscape will retain its current structure but operate with greater coordination and potentially lighter touch.
Most peer financial firms will passively wait for guidance, but forward-thinking risk leaders should proactively establish direct Treasury engagement channels, conduct materiality assessments of compliance activities, and develop a strategic position that influences how "material financial risk" gets defined in practice. The most significant oversight in the industry will be failing to recognize this as a temporary window for influence before implementation patterns solidify.
_________________________________
FINRA Undertakes “Broad Review of Its Rules Seeks Industry Input - source advisoryhub.com
Key Points:
FINRA has launched a comprehensive rules modernization review focusing initially on capital formation and workplace supervision, seeking industry feedback until May 12, 2025, amid a broader deregulation push under the current administration. This represents a significant opportunity for broker-dealers to shape regulatory requirements around remote supervision and recordkeeping while potentially reducing compliance burdens, coming at a time when FINRA's enforcement actions have continued their multi-year decline with penalties dropping 14% to $87 million in 2024.
Risk Data to Geek Out On
Define Counterparty Risk - Managing Financial Risk Management - riskonq .com
This week we will continue to focus on a key risk program in financial risk management, moving to Liquidity Riks, last week we covered Market Risk. Over the coming weeks, we will define these concepts to enhance understanding and appreciation of the vast risk management ecosystem existing in the financial sector.
Counterparty Risk Management: Comprehensive Analysis for Financial Institutions
Counterparty Risk Management is a critical component of Financial Risk Management, focusing on mitigating the risk of financial loss due to a counterparty's inability to fulfill contractual obligations. Below is a structured analysis tailored for financial institutions.
Precise Definition
Counterparty Risk Management refers to the identification, measurement, and mitigation of risks arising when one party in a financial transaction fails to meet its contractual obligations. It encompasses the following principles:
Types of Counterparty Risk:
Credit Risk: The risk of default due to insolvency or financial distress913.
Pre-Settlement Risk: The risk that a counterparty fails before the transaction is settled9.
Settlement Risk: Arises during the lag between transaction execution and settlement9.
Wrong-Way Risk: Occurs when exposure increases as the counterparty's creditworthiness declines51.
Interconnection with Other Risks:
Credit Risk: Counterparty risk is essentially a subset of credit risk, as it involves assessing the likelihood of default913.
Market Risk: Market volatility can amplify counterparty exposure5128.
Operational Risk: Poor systems or processes can exacerbate counterparty exposure issues18.
Liquidity Risk: Defaults can trigger liquidity crises across interconnected systems17.
Financial Institution Context
Implementation Across Institutions
Financial institutions adapt Counterparty Risk Management based on their business models:
Banks: Manage large derivatives portfolios and securities financing transactions through collateralization and margining1722.
Investment Firms: Focus on exposure monitoring and stress testing for complex instruments like OTC derivatives2728.
Credit Unions: Emphasize credit risk in loans and member deposits.
Regulatory Landscape
Key frameworks influencing practices include:
Basel III Standards: Capital requirements and stress-testing methodologies for counterparty exposures2247.
Dodd-Frank Act (US): Clearing mandates for OTC derivatives to reduce systemic risk925.
European Market Infrastructure Regulation (EMIR): Mandatory clearing and reporting requirements for derivatives in Europe9.
Impact of Financial Products
Macroeconomic Factors
Economic conditions such as GDP growth, interest rates, inflation, and unemployment significantly affect counterparty risk profiles:
Counterparty Risk Management Strategies
Key Strategies:
Risk Scoring Models:
Loan Origination Processes:
Rigorous underwriting standards including sensitivity analyses for counterparty credit profiles24.
Monitoring Mechanisms:
Collateral Management:
Portfolio Diversification & Stress Testing:
Effectiveness & Limitations:
Role of Technology & Data Analytics:
Modern tools leverage AI/ML for real-time monitoring, predictive modeling, and automated decision-making, enhancing efficiency and accuracy in managing counterparty risks3843.
Emerging Risks & Digital Transformation
Contemporary Challenges:
Digital Initiatives:
Measurement & Metrics Framework
Key Measurement Approaches:
Key Risk Indicators (KRIs):
Stress Testing Methodologies:
Capital Adequacy Metrics:
Actionable Insights
Best Practices:
Establish robust governance frameworks with clear escalation protocols.
Invest in technology-driven solutions for real-time monitoring.
Diversify counterparties across industries/geographies to minimize concentration risks.
Real-world Examples:
The Archegos Capital default highlighted deficiencies in monitoring concentrated exposures across counterparties, leading to significant losses for banks like Credit Suisse and Nomura1517.
Quantifi’s CRMS solution enabled an APAC investment bank to achieve real-time credit evaluations and stress testing capabilities, improving operational resilience against counterparty risks52.
Lessons Learned & Common Pitfalls:
Avoid over-reliance on external ratings; integrate internal models with dynamic market data.
Ensure timely action when limits are breached; delays can exacerbate losses during stress periods.
This structured framework provides actionable insights for financial institutions aiming to optimize their Counterparty Risk Management strategies while navigating regulatory complexities and emerging challenges effectively.
_________________________________
Thank you for reading,
Naeem
p.s. If you find the Risk Queue newsletter helpful please subscribe and share it with a friend or colleagues, you can find it here!