The Gulf needs its own constellation
A new Central Bank law, eight new modules, and why the Gulf gets a sibling suite instead of a localized platform.
Read the essayEssays
A collection of 7 posts
The build-versus-buy inversion in risk technology
For twenty years the only honest branch was buy. The premise that made it true has expired, and the widest build-versus-buy gap in risk technology is still widening.
Read the essaySplicing the tail: the severity modeling choices that actually matter
The body of the severity distribution is easy; the tail is the entire game. A walk through the modeling choices that actually move the answer: splicing, thresholds, and the copula default nobody questions.
Read the essayThe second line doesn't need fewer people. It needs instruments.
Every AI conversation in risk starts with the wrong question: headcount. The second line's binding constraint has never been intelligence. It's attention, and attention is exactly what the new instruments return.
Read the essayOperational resilience is the successor discipline. Most banks haven't noticed.
The regulators didn't add a workstream. They changed the unit of analysis: from risk categories to services, from losses to continuity, from registers to evidence. That's not an extension of operational risk. That's a successor.
Read the essayScenario analysis is broken. Here's the blueprint for fixing it.
Most banks run scenario analysis as a once-a-year workshop. The narratives are static, the anchoring is unexamined, and the challenge is theatre. It doesn't have to work this way.
Read the essayWhy I'm building in public: a research agenda for AI-native operational risk tooling
GRC systems became glorified registers while regulatory expectations leapt ahead. Twelve modules, two flagships, one platform: the gap closes only when the builders understand the domain.
Read the essay