reading roomThought Leadership

Monday, October 12, 2026
The Innovation of Risk Reading Room provides independent analysis of risk management, AI governance, board oversight, regulation, operational resilience, compliance and culture. Our articles translate current events and regulatory developments into practical questions for boards, executives, auditors and risk professionals.

Recent news

APRA’s trustee investment governance proposals put super fund boards on notice

APRA has released proposals to strengthen trustee investment governance for superannuation trustees. This is a consultation item rather than a final rule, but it signals a likely lift in expectations around how trustees oversee investment…

Why Clear AI Use-Case Ownership Is Crucial to Avoid Risk Bottlenecks and Accelerate Innovation

AI initiatives often stall not because of the technology itself, but because unclear ownership creates risk bottlenecks and delays. Business leaders must claim clear accountability for AI use cases to enable faster, safer innovation and better risk management.

OAIC adds transparency pieces boards need for AI

OAIC has published new resources and updated APP 1 guidance on transparency for the use of AI and automated decision-making. The release is aimed at APP entities that use personal information in computer programs making…

Featured

Cyber risk is not a compliance project, it is great business

The deeper lesson is that cyber risk maturity must be embedded into normal strategic, operational, supplier and technology assessments.

Effective Risk Committees

The practice of effective risk management requires the management team to take ownership for the risks of their business through an effective and efficient decision making process.

Every Risk Moment Matters

In each of our working and personal lives every moment matters. This applies just as much for risk moments as customer facing moments.

Thought Starters

AI Signal Box: a simpler way to think about AI governance

AI is already moving through most organisations. Sometimes it is visible. Sometimes it is hidden inside software, vendor tools, workflows or staff experimentation.

When Macro Risk Reaches the Operating Model

The Eagle S tanker's severing of the Estlink 2 power cable, Allianz's 2026 Risk Barometer finding that only 3% of firms see their supply chains as "very resilient," and the Bank of England PRA's move to incident-level reporting all show the same thing: macro and geopolitical risk stops being theoretical the moment it forces a real business decision. Here's what a mature operating model needs to prove.

Why Shadow AI Demands Immediate Board-Level Attention and Practical Risk Controls

A NSW Reconstruction Authority contractor uploaded flood victims' personal data to ChatGPT in 2025, echoing Samsung's 2023 source-code leak. New 2026 survey data shows most staff still use unsanctioned AI tools — here's what boards should do about it.

How to Master AI Risk Control Testing for Real-World Assurance

NIST’s August 2026 TEVV-Athlon draft makes real-world AI evaluation a current governance issue. Businesses should connect every test to pre-agreed acceptance thresholds, a named decision owner and clear retest triggers.

Categories

Learn more about Innovation of Risk subscription services