The Risk Horizon Brief
24 May 2026 | Weekly Institutional Intelligence
This Week's Intelligence Summary
US regulators are tightening the supervisory perimeter through coordinated enforcement and information-sharing frameworks, while UK and EU authorities advance foundational changes to settlement, clearing, and reporting infrastructure. The dominant theme is the elimination of regulatory arbitrage—both across agencies and across jurisdictions—demanding faster self-reporting, integrated controls, and recalibrated operating models. Boards should treat this week's signals as a coordinated shift in supervisory posture rather than isolated developments.
Top 3 Signals
1. CFTC Establishes New Cooperation and Self-Reporting Framework
Jurisdiction: CFTC | Impact: Increasing | Business Line: Capital Markets
The CFTC's new declination policy creates a clear path to reduced enforcement outcomes for firms that voluntarily self-report and remediate. Combined with the parallel SEC-NFA MOU, this materially raises the cost of delayed disclosure for dual-registered firms and demands board-level recalibration of escalation thresholds.
2. BoE Consults on Near-24x7 RTGS and CHAPS Settlement
Jurisdiction: BOE | Impact: Increasing | Business Line: Payments
The Bank of England's proposals to extend sterling wholesale settlement hours toward continuous operation will reshape intraday liquidity management, treasury operations, and operational resilience requirements for all CHAPS participants. Direct and indirect participants must begin assessing staffing, funding cover, and third-party dependency implications immediately.
3. EBA Clarifies AML Scope for EMT Issuers and Lightning Network
Jurisdiction: EBA | Impact: Increasing | Business Line: Payments
The EBA's final Q&As confirm that EMT issuance and Lightning Network transactions fall squarely within EU AML and Travel Rule obligations, resolving interpretive uncertainty for crypto-asset service providers and banks offering related services. Firms must validate transaction monitoring scope and update AML risk assessments to reflect the clarified perimeter.
Strategic Insight
The convergence of inter-agency MOUs, formalised self-reporting frameworks, and cross-border supervisory cooperation marks the end of the "siloed regulator" era for globally active financial institutions. CROs and Board Risk Committees should anticipate that misconduct identified by one regulator will be rapidly shared across the supervisory network, eliminating the window in which firms could selectively manage disclosure. The institutions best positioned for this environment will be those that move self-reporting decisioning from a reactive legal function to a proactive, board-governed enterprise risk discipline with documented timing triggers and cross-jurisdictional alignment.
Recommended Action
This week, risk and compliance functions should:
Convene a Chief Risk Officer-led review of the firm's self-reporting and regulatory escalation framework, ensuring alignment with the new CFTC declination policy, the SEC-NFA MOU, and parallel FCA Senior Manager and EU MAR obligations. Output should be a board-approved Self-Reporting Decision Protocol with documented timing triggers (target: 30 days from credible internal finding), cross-jurisdictional consistency standards, and an integrated governance owner. Map to the firm's Enterprise Risk Management Framework under the Regulatory & Compliance Risk taxonomy.
The Risk Horizon Brief is published weekly by Risk Horizon. Institutional intelligence for global financial services. riskhorizon.io