Exciting news! 🎉 We're delighted to share that Ncontracts has acquired Quantivate, a prominent player in the world of governance, risk, and compliance (GRC) solutions for the banking sector. 🤝 okt.to/Hq3vZb

No regulator requires an AI risk framework, yet NIST, ISO, and CRI each published one. How do you find the right fit for your institution? Lara Miller and Clay Carter compare them Oct 29, 1 PM CT. Register today: ncontracts.com/webinars-choo…

The ROAD to Housing Act raised the public welfare investment cap from 15% to 20% for national banks and state member banks. The 5% approval threshold didn't move, and the Act left CRA alone, more room under the cap doesn't mean more CRA credit. Read more: ncontracts.com/nsight-blog/r…

Ask 10 risk officers if their institution follows an AI risk framework and you'll hear yes, no, or "which one?" Six documents claim the space (NIST AI RMF, FS AI RMF, ISO 42001, SR 26-2, COSO GenAI, CSBS), but only two are actual frameworks. ncontracts.com/nsight-blog/a…

We're benchmarking the State of TPRM for 2027, and we want your program in it. Add yours: surveymonkey.com/r/stateoftp…

Everyone's told to find slack in the compliance budget, but nobody agrees where it is. Stephanie Lyon breaks down how to cut right without losing coverage. Join us tomorrow 1 pm CT: ncontracts.com/webinars-the-…

A two-person RIA and a $50B firm are held to the same standard under Reg S-P. Size doesn't earn you a lighter compliance burden, just a smaller team to carry it. Small firms don't have a spare person to read every SOC 2 report and track every renewal. bit.ly/4hGDHgP

Five years ago, nobody was talking about AI risk. Now it's reshaping how financial orgs manage risk, and the pace is only speeding up. Waiting to see how AI shakes out isn't the neutral option. It's a risk decision.

On Sept 30 at 1pm CT, CEO Michael Berman and Rafael DeLeon, SVP of Industry Engagement, will break down the new proposed vendor risk guidance from the OCC, FDIC, Fed, and NCUA, including the undefined "reasonable judgment" standard. Register today! ncontracts.com/webinars-prop…

Tiering a vendor as one unit forces a bad choice: call everything critical, or let the risky service hide in the average. Tier the service, not the vendor. From The Upside of Third-Party Risk Management. #TPRM

Reg E and fraud prevention run through the same vendors: core processors, dispute platforms, card processors, P2P networks, fraud detection tools. That makes vendor management a Reg E control. Read the full article below. ncontracts.com/nsight-blog/r…

New in Ncomply: the Compliance Library. Nearly 200 model forms, checklists, calculators, and flowcharts for Reg E, BSA/AML, fair lending, and more. A disputed $1,200 charge goes from a day of research to a 30-minute task done right. If you're on Ncomply, it's already available.

A holding company just got hit with a Written Agreement from the Fed and a state regulator, on top of its bank's consent order. Dividends and new debt are frozen until regulators sign off. Details: ncontracts.com/nsight-blog/e…

Federal agencies pulled back on fair lending enforcement in September, but states pushed the opposite direction — from Illinois codifying disparate impact to a judge blocking an early exit from a redlining order. Less federal oversight rarely means less scrutiny. #FairLending

We're hiring: Accounting Manager, VP of Sales, Regulatory Intelligence Expert, and Director of BDR. Finance, sales, regulatory strategy, and pipeline building, all remote. Visit ncontracts.com/careers for more information.

A $500M community bank doesn't need a $50B institution's three-lines-of-defense model. Monica Bolin breaks down where to start building a right-sized risk program. ncontracts.com/nsight-blog/r… #RiskManagement

Every unit in the military supports the element above it, and Michael Carpenter brings that framing into vendor management: nothing in your vendor ecosystem operates in isolation. The Upside of Third-Party Risk Management is out now on Amazon → ncontracts.com/the-upside-of… #TPRM

Most due diligence reviews use the same checklist for every vendor, whether they hold sensitive data or not. That wastes time on the easy ones and goes thin where the risk is actually highest. Michael Carpenter tomorrow, 1-2 PM CT: ncontracts.com/webinars-vend… #TPRM

Most TPRM programs tier vendors, but tiering by vendor services gets you a more accurate picture, since one vendor can carry very different risk levels across its services. Our new guide breaks down a practical multi-tier framework → ncontracts.com/vendor-tierin… #TPRM

A SOC 2 report, financials, a continuity plan: vendors send documents, but most programs never learn to read them or scope the review to real risk. Michael Carpenter fixes both August 27 at 1pm CT → ncontracts.com/webinars-vend… #VendorRisk

A skipped review, an unenforced policy, a loan exception nobody questioned. Each looks small, but together, years pass before anyone outside the institution notices. What controls need to look like in 2026 → ncontracts.com/nsight-blog/i… #BankingCompliance