Insights

What we’re seeing.

What we’re thinking.

What’s next.

Navigating the New Era of Operational Resilience: OSFI E-21 vs. DORA

In today’s hyper-connected economy, financial institutions are increasingly exposed to a perfect storm of cyber threats, complex tech ecosystems, and systemic interdependencies. Regulators aren't just asking firms to "bounce back" anymore; they are demanding they stay standing during the chaos. Two heavyweight frameworks have emerged to lead this charge: OSFI Guideline E-21 in Canada and the Digital Operational Resilience Act (DORA) in the European Union. While they share

Danielle Taylor

3 min read

OSFI B-15 and the Global Sustainability Shift: Why Compliance Maturity Still Matters

Over the past year, expectations around climate and sustainability risk have continued to evolve. In Canada, OSFI’s B-15 guideline was introduced as a milestone in how banks and insurers are expected to manage and disclose climate-related risks. It signaled shift, from reporting climate as a standalone issue to embedding it into governance, risk, and business strategy. But in recent months, there’s been a recalibration. Institutions are navigating a moving target: regulatory

Jason Barskey

2 min read

Navigating the Complexities of Third-Party Risk Management

In today’s financial ecosystem, reliance on third parties is not just commonplace, it’s a strategic necessity. From cloud providers to...

Danielle Taylor

2 min read