Regulatory Divergence

Regulatory divergence and legal challenge will continue, drive high operational, risk and compliance challenges/impacts and potential compliance and reputational risks.

> Learn more: Explore the regulatory shift, legal Impacts, regulations, and actions to take.

Trusted AI & Systems

In 2025, anticipate repeal of the current AI Executive Order and the establishment of a new AI Executive Order focused on prioritizing AI innovation and growth across all agencies. 

> Learn more: Explore principles for trusted AI, multifaceted risk management approach, AI risk challenges, and actions to take.

Cybersecurity & Information Protection

As cybersecurity risks remain a key concern across industries, and particularly relative to critical infrastructure and security, regulatory scrutiny of data security, data risk management, operational resilience, and incident response/reporting will continue in 2025. 

> Learn more: Explore harmonization/reciprocity, meeting standards, and reporting threats/incidents—and actions to take.

Financial Crime

Focus on financial crime regulation (inclusive of sanctions, anti-corruption, know-your-customer, anti-money laundering, beneficial ownership, etc.) is unlikely to abate in 2025. 

> Learn more: Explore heightened risk, data lineage and quality, thresholds and monitoring, and actions to take.

Fraud & Scams

Increasing numbers and costs of fraud losses coupled with increasing risks (including online privacy, cybersecurity, identity theft and AI-generated deepfakes) will drive regulatory focus and supervision in areas of model risk management, authentication and reporting.

> Learn more: Explore sizing exposures, identification and tips, internal controls, and actions to take.

Fairness & Protection

Agency leadership mission changes as well as the successful legal challenges to jurisdictional authorities have delayed and/or limited the effect of certain consumer/investor protection regulations. 

> Learn more: Explore issues with access, clarity and accuracy, “Harm”, and actions to take.

Financial & Operational Resilience

The probability and potential impact of disruptions has increased driven by evolving technologies and a growing interconnectedness between financial and nonfinancial companies. 

> Learn more: Explore expanding resiliency, continuity and resolution, tolerance and testing, and actions to take.

Parties & Providers

Given increasing reliance on and complexities in third-party/provider relationships as well as growing interdependencies and interconnectedness between and among companies and industries, regulators will continue to assess risks for supervised companies across such areas as compliance, fraud/waste, data management, cybersecurity, financial crimes, and fairness. 

> Learn more: Explore risk coverage, risk-based approach, monitoring and metrics, and actions to take.

Governance & Controls

Companies will need to continue to act on prior regulatory findings in the area of heightened risk management and governance amidst changing levels of regulatory intensity. 

> Learn more: Explore controls, data, issues management, change management, and actions to take.

Markets & Competition

> Learn more: Explore market disruption, fair competition and trade, regulatory perimeter, and actions to take.

Download the report below for anticipated areas of regulatory attention and actions companies can take to help prepare.