New risk mandate for Canadian banks

In July 2026, Canada and eight partner countries announced their intention to establish the Defence, Security and Resilience Bank (DSRB). While details of the final operating model are still emerging, the initiative could introduce a new set of strategic considerations for Canadian financial institutions. 

Participation in the DSRB ecosystem may require banks to look beyond traditional financial and regulatory risks. Fraud, anti-money laundering, sanctions, cybersecurity and operational resilience could become increasingly connected to broader economic and national security considerations. Even familiar banking activities and information may take on greater strategic significance in a defence-focused environment. 

This report examines how the DSRB could reshape the risk landscape for Canadian banks. It considers the potential opportunities, risks and governance requirements associated with participation, while identifying the key questions executives should be asking now.  

The resulting challenge is to determine how DSRB linked activities should be risk-assessed, governed and controlled. The required response is a mission-specific overlay on existing frameworks, not a parallel compliance universe. 

 The six imperatives below translate that challenge into practical considerations for boards and executives. 

Receive insights, events and more to your inbox

Subscribe

The 6 Imperatives for financial institutions navigating the DSRB ecosystem 

Strategic choice, not only a product decision 

Boards should define where and how the bank is prepared to participate, including sectors, roles, geographies, counterparties, data exposure and conditions for decline. 
Role determines exposure 

A lender, transaction bank, advisor and information custodian see different data, create different dependencies and require different controls.   
Information becomes a protected asset

What the bank knows may be as important as what it moves. Strategic data requires classification, need-to-know access, monitoring and secure sharing. 
Fraud becomes an intelligence signal  

A fake supplier, payment diversion or unusual file access may indicate sanctions evasion, terrorist financing (TF), foreign influence, reconnaissance or supply-chain compromise. 
Zero-dollar events can be material  

Attempted transactions, exposed relationships, operational delay and reputational harm can trigger significant consequences even when no funds are transferred or lost. 
Functions must converge  

The operating model should connect fraud, AML/ATF, sanctions, cyber, insider, third-party and resilience decisions without forcing an organizational merger.