oprisk eu polling questions

Operational Risk and Technology Europe 2025 October 14-15 2025 Poll results

TABLE OF CONTENTS •

Combining Operational Risk and Technology into one strategic event

•

RCSA Quality and Maturity

• • • • • • • • • • • • • • • • • • • • •

Operational Risk Framework and Tools Is Alignment a Priority?

What Risks are we not focusing enough on?

What are we not doing enough of?

What topic(s) are of most interest to you?

Overall, how well are you managing regulatory complexity?

Is there good cross-functional collaboration in approaching regulatory initiatives?

What could we do better in approaching regulatory complexity?

Are you using GenAI in Risk Management?

What do you believe are the most material GenAI-related risks?

Have you established GenAI governance?

How actively are you currently engaged with Quantum computing?

How is OpRisk collaborating with Tech in understanding and managing risks of emerging technologies?

Have you achieved the optimum balance between tech innovation and security?

Word cloud: What do you believe are the core skills of modern Operational risk professionals?

What background is best to transition into OpRisk roles?

What do you believe is the right balance between GenAI / Agentic AI autonomy andoversight?

Do you use one single tool which both monitors and onboards, or are they separate?

Which part of risk culture is your top constraint today?

Where will you invest first after this session?

Describe how you would define data ethics in financial organization’s context

Combining Operational Risk and Technology into one strategic event Is vital, as they are now inseparable 62% Is a good move, which fosters collaboration 38% Would have preferred two separate conferences: Op Risk and Technology 0%

Multiple-choice poll

Operational Risk Framework and Tools Remain fit for purpose 0% Some enhancement is needed Lui 68% Radical re-think is required 32%

Multiple-choice poll

RCSA Quality and Maturity Spot on!

0% Adequate 10% Would benefit from enhancement 90%

Multiple-choice poll

Is Alignment a Priority?

Yes, already progressing 72% Yes, considering 28% No, don’t believe it’s needed 0% Not sure 0% Multiple-choice poll

What Risks are we not focusing enough on?

the current environment no longer respects taxonomies

Employee risk

Conduct

Product and process BAU

Change execution IT and Cyber

Quantum computing

GenAI

People and change

Interconnectedness of Risks

People

Change risk

IT change

Data

People’s skillset Change management

Speed of change

Data governance

What are we not doing enough of?

Adjusting framework for 1LoD needs and strategic goals Linking all information we see together

Forsight

Looking at the big picture

OpRisk staff is completely outdated Data structuring

Measuring

Deconflicting Supporting alignment 2LOD no longer an enabler

Evolving

Learning

Integration

Simplicity

Think broad

Focus on essentials

Too detached from the business Risk management

Talk on key risks

Data informed testing

Strategy planning

Lookacross

Embedding Risk and Resilience

What topic(s) are of most interest to you?

Regulation and governance

44% Cybersecurity 52% GenAI 67% Quantum computing 30% Regulation and governance 30% Cybersecurity 44% Future of Operational risk 67% Multiple-choice poll

Overall, how well are you managing regulatory complexity?

Well managed 19% Adequately 59% Enhancement needed 22%

Multiple-choice poll

Is there good cross-functional collaboration in approaching regulatory initiatives?

Effective, productive collaboration 17% Some collaboration 60% Mostly working in silos 23%

Multiple-choice poll

What could we do better in approaching regulatory complexity?

Technology - AI

governance

Upskill risk managers with resilience knowledge

requirements focus

agile

adapt

risk

overlapping Proactive process

new

compare

pragmatic

may

approach

simplify

able

white risk frameworks

Pragmatism management

Senior ownership

analysis/teams

jump

Risk awareness

early primary

change

Specialist involve

oversees implementation

documented planning easily

frameworks

regulatory

regulation party

appropriate

right

ensure teams

Collaboration

Are you using GenAI in Risk Management?

Yes, effectively 6% Yes, to a limited extent 42% Currently testing / exploring 29% Planning to explore 16% Not planning 6%

Multiple-choice poll

What do you believe are the most material GenAI-related risks?

Advanced cyber attacks Cost

Loss of self-thinking capabilities

Unfair bias

Technical detail

Model

Security

Deep fakes

Integrity loss

Data Privacy

Prompt Injection

Spoofing

Skills

Hallucinations

Human Jailbreak

Bias

Fake news

Data loss

Personal data leakage

Model bias Decionmaking

Data leakage Errors

Blackbox

Control of sensitive information

Have you established GenAI governance?

Yes, it is established and functioning 38% Yes, documented, not yet live 10% In progress 34% Not started 17%

Multiple-choice poll

How actively are you currently engaged with Quantum computing?

Fully engaged 0% Somewhat involved in relevant projects 8% Familiar with the concept but not engaged in practice 50% Not familiar / not involved 42% Multiple-choice poll

How is OpRisk collaborating with Tech in understanding and managing risks of emerging technologies?

Full collaboration, clear roles, complimentary skills 11% Adequate collaboration 22% Ad-hoc collaboration 48% Would benefit from enhancement 19% Multiple-choice poll

Have you achieved the optimum balance between tech innovation and security?

Yes, optimum balance 9% Geared more towards innovation 23% Geared towards security 36% Not sure 32% Multiple-choice poll

What do you believe are the core skills of modern Operational risk professionals?

Adaptability of approach Approachable

Risk specialism

Listening

Factural

Curious

Versatility

connectivity

picture

Collaboration Business Acumen

Curiousitt

Influencing

Adaptability risk

understand

Data analysis Courage Curiosity

Communication

Inquisitive

Stakeholder management Ability

Strategic

Understanding the business

Understanding of change

big

What background is best to transition into OpRisk roles?

Financial Risk / Finance 16% Internal Audit 20% Compliance 20% IT 24% Other functions 4% Any background, with the right skills and attitude 64%

Multiple-choice poll

What do you believe is the right balance between GenAI / Agentic AI autonomy and oversight?

100% oversight, with human in the loop 27% 80% oversight of the most critical tasks / 20% autonomy 38% 50 / 50, allowing autonomy, enabling innovation with select oversight 35%

Multiple-choice poll

Do you use one single tool which both monitors and onboards, or are they separate?

Single 43% Separate 57%

Multiple-choice poll

Which part of risk culture is your top constraint today?

Leadership behaviors 12% Psych safety & speak-up 12% Skills & capacity 47% Metrics & incentives 0% Tech & data 29% Multiple-choice poll

Where will you invest fi rst after this session?

Targeted training / labs 31% Leadership routines (risk walk-arounds, speak-up) 31% Process redesign / choice architecture 19% Metrics & MI (leading indicators) 13% Model governance / human-in-the-loop 6% Multiple-choice poll

Describe how you would define data ethics in financial organization’s context

Misunderstood

Hidden

Data ethics Mmmmmm

Complex

Not discussed

Missing

GDPR/DPA redundant?

Immature