GRC Report Staff

ESMA Puts Cyber Resilience at the Heart of Its 2026 Supervisory Agenda

The European Securities and Markets Authority (ESMA) is doubling down on digital resilience. The EU’s markets watchdog announced that cyber risk and operational resilience will again headline its Union Strategic Supervisory Priorities (USSPs) in 2026, extending its focus on one of the most pressing challenges facing Europe’s financial system.

RAMS Ordered to Pay $13 Million for Home Loan Compliance Failings

The Federal Court of Australia has ordered RAMS Financial Group to pay a $13 million (AUD 20 million) penalty after the company admitted to systemic compliance failures in its home lending operations between June 2019 and April 2023.

OCC Announces October Enforcement Actions, Targets Governance & BSA/AML Deficiencies

The Office of the Comptroller of the Currency (OCC) released its list of enforcement actions for October 2025, highlighting continued regulatory focus on board oversight, corporate governance, and anti-money laundering compliance across the U.S. banking sector.

French Court Convicts TotalEnergies of Greenwashing Over Climate Claims

A Paris court has convicted TotalEnergies of misleading consumers through “greenwashing,” ruling that the French oil and gas giant overstated its environmental commitments and misrepresented its pathway to carbon neutrality.

Canada’s Financial Watchdog Fines Crypto Firm Cryptomus $127 Million for AML Failures

Canada’s financial intelligence watchdog has handed down its largest-ever penalty, fining Xeltox Enterprises, the company behind the crypto platform Cryptomus, $127 million (C$176,960,190) for repeated violations of anti-money laundering and counter-terrorist financing laws.

MEPs Reject Mandate on Simplified Sustainability & Due Diligence Rules Ahead of November Vote

‍The European Parliament has rejected a draft mandate that sought to streamline sustainability reporting and due diligence obligations for companies, setting the stage for a renewed debate and a fresh vote next month.

New York Issues Fresh Cybersecurity Guidance on Third-Party Risks

As financial institutions continue to lean on an expanding universe of cloud, fintech, and AI providers, New York’s financial regulator is reminding them that outsourcing doesn’t mean offloading responsibility.