Your Next AI Regulator Is Your Underwriter AI Governance When the Rulebook Won't Hold Still: Insurance as the New Enforcement Layer

Most AI governance sessions still treat the regulator as the enforcement layer. By September 2026, that frame is broken. The EU AI Act's high-risk obligations are live. Colorado's landmark AI law collapsed in May — stayed by a federal court and effectively replaced before it ever took effect. There is no near-term US federal AI law. So where does the real enforcement pressure on US companies actually come from? Your insurance renewal. Your D&O carrier. Your E&O rider. Your cyber policy adding — or excluding — affirmative AI coverage. The same market dynamic that repriced cyber insurance between 2018 and 2022 is now running on AI, compressed into two to four years. The Anthropic settlement, the Workday class certification, the Oracle securities suit, and the Character.AI filings are the actuarial record forming in real time, and underwriters are already pricing against it. This session shows you what underwriters, auditors, and plaintiff's counsel will ask for — and where the evidence has to be emitted to defend it. You'll leave with a clear read on which regulatory bets matter, the points in your AI delivery lifecycle where governance evidence must be produced, and the questions to bring to your CFO, General Counsel, and insurance broker before your next renewal.

Ken Johnston

Digital KYC in the Real World: Identity, ITINs, Consular IDs, Online Account Opening, and the New CDD Politics

KYC and CDD are moving into a more complicated environment, shaped by digital account opening - which has no doubt made customer onboarding faster, but has also made identity, documentation, and risk-based due diligence more nuanced. Recent FinCEN and interagency guidance has placed renewed attention on how banks identify customers, evaluate alternative forms of identification, recognize suspicious activity, and apply enhanced due diligence - while raising new questions about how those expectations should be implemented in practice. This session examines practical CDD and EDD considerations involving online account opening, ITINs, consular IDs, synthetic identity, fraud indicators, and customer risk documentation. Participants will consider how banks can respond to new regulatory and policy pressures without reducing risk-based due diligence to broad assumptions, rigid categories, or automatic conclusions.

Brett Goodnack, JD, CAMS

COSO Audits

This session provides a clear, practical walkthrough of how to apply the COSO Internal Control Framework within an audit environment. Participants will explore the five COSO components—Control Environment, Risk Assessment, Control Activities, Information & Communication, and Monitoring—and learn how to evaluate their effectiveness through a structured audit approach. The session highlights common gaps, documentation expectations, testing techniques, and strategies for strengthening internal controls across financial, operational, and compliance areas. Attendees will leave with actionable insights to enhance audit quality, support organizational governance, and reinforce a strong control culture.

Diego Herrerias

Executive Orders, Fair Lending, and Credit Risk: Federal Policy in Focus

The session will focus on an examination of current fair lending requirements in the lens of credit risk and the impact of recent proposed and implanted changes, including shifts in regulation and rules surrounding disparate impact, discouragement, Special Purpose Credit Programs, and fair banking or debanking. Executive orders, changes to Regulation B, and the remaining bedrock of fair lending law will be examined to allow bankers to consider credit risk while grappling with changes to Federal rules that impact a bank’s fair lending efforts.

Elizabeth Holtrop CCBCO, CBAP, FLE

From Checkbox Compliance to Useful Intelligence: 314(b), SAR Decisions, and Better BSA Information Sharing

This session discusses recent efforts made by FinCEN to level the playing field when it comes to fraud. Undoubtedly criminals are sharing tips and tricks to continually become more sophisticated, but is the financial industry doing the same? With a constant focus on privacy, it can be challenging to walk the line between fraud prevention and illegal sharing. Attendees will come away with strategies to navigate these challenges.

Wendy Sullivan, CIA, CRCM

Examination-Ready by Default: The Execution Structure Behind Compliance That Holds

Most institutions treat examination readiness as a separate scramble, assembling evidence when the request arrives. The institutions that move through examinations with the least friction do something different. They build execution structure into how regulatory and product changes get done, so the evidence trail of who decided what, what was changed, and when becomes a natural output of the work rather than a task bolted on afterward. This session shows compliance and audit leaders why disciplined execution is itself a safeguard. When a recurring regulatory change comes due years later, the documented record of how it was handled last time is what makes the next cycle fast and defensible. When an examiner asks for a full history of products implemented or discontinued, the institution that executes with structure already holds the answer. Attendees will leave understanding how execution becomes institutional memory, and how that memory protects the institution's regulatory standing and the member trust that depends on it.

Natasha Kasimtseva

ISO Auditing

This session offers a focused, compliance‑driven overview of ISO auditing tailored for financial institutions navigating today’s heightened regulatory expectations. Attendees will gain clarity on how ISO frameworks strengthen operational resilience, reinforce control environments, and support a culture of continuous improvement across banking operations. The session walks through the audit lifecycle—from planning and documentation review to evidence collection, nonconformity reporting, and corrective action management—highlighting how each step aligns with regulatory scrutiny and risk‑management priorities. Participants will also explore common audit gaps found in financial services, practical strategies to maintain audit readiness, and ways to leverage audit outcomes to enhance governance, reduce operational risk, and demonstrate compliance maturity to regulators and stakeholders. This session equips compliance leaders with actionable insights to elevate their audit programs and drive stronger organizational performance.

Steven Crutchley

Closing Panel