Dan Bailey, CERP, GRCP, FBCI, MBCP

Fraud rarely appears overnight. It develops quietly through pressure, opportunity, and weak or overlooked controls. This guide outlines a practical approach to assessing fraud risks during engagement planning, helping audit and risk teams identify what matters most before issues escalate. It highlights how to evaluate control environments, recognize red flags, and prioritize risks in a structured and defensible way. A valuable resource for internal auditors, risk managers, and compliance professionals focused on stronger governance and better audit outcomes. #LinkedIn #InternalAudit #FraudRisk #RiskManagement #CorporateGovernance #AuditPlanning #UAE #KSA

58

2 Comments

Audits shouldn’t run your security strategy. Modern banks & credit unions are moving beyond checklist compliance to Integrated Risk Management (IRM). ✔️ Continuous risk visibility ✔️ Always-on NIST, FFIEC & GLBA readiness ✔️ Fewer audit surprises ✔️ One unified view of security, risk & compliance Real security isn’t prepared for audits - it’s built to withstand risk 📩 Contact: dean.trumbull@trumbullsecurityservices.com #IntegratedRiskManagement #CyberSecurity #BankingSecurity #RiskManagement #Compliance #CISO #NIST #BankingTechnology #RegTech #FFIEC #GLBA #ITRisk #DigitalTrust

6

Regulatory exams don't just test your risk program. They test whether you can prove it. Examiners expect more than policies on paper. They want to see current risk assessments, complete vendor oversight records, training documentation, board governance materials, and evidence that findings get resolved, not just identified. The difference between a smooth exam and a stressful one often comes down to how documentation is organized before examiners arrive. We've put together a practical guide covering the essential documents every financial institution should have ready, and how centralized GRC software makes exam prep routine rather than reactive. 👇 Link in first comment.

4

1 Comment

New to financial crime or compliance? This introductory workshop builds a strong foundation in Suspicious Activity Report writing. Learn SAR purpose, key components, the 5 W’s framework, and how to write clear, factual narratives with confidence: https://bit.ly/4apNhlb

8

When is it necessary for banks to report suspicious activity? FinCEN and federal banking regulators recently issued new FAQs clarifying expectations for Suspicious Activity Reports (SARs). The guidance provides insight into how institutions should approach SAR filings, timelines, and compliance practices. Our update breaks down the FAQs into clear takeaways and explains their significance for compliance programs: https://bit.ly/4n53Nd2 Ben Hutten | Jeanine McGuinness | Ignacio Sandoval | Avery Turzanski #FinCEN #Banking #Fraud

4

Getting Ahead of NACHA’s 2026 Changes: A Practical Guide 📖 ACH fraud is accelerating and Nacha's 2026 rule changes will reshape how ODFIs, RDFIs, TPSPs, and TPSs manage risk. How can Risk teams getting ahead of the shift? 👉 Dive into this practical guide breaking down what’s changing, why it matters, and how institutions can prepare today. In this guide, you’ll learn: ✔️ Your role under the new 2026 fraud rules ✔️ How to build adaptive, explainable fraud workflows that scale ✔️ Practical ways to tackle synthetic IDs, mule activity, and BEC fraud ✔️ How leading institutions are shifting to proactive, real-time monitoring Built on real-world scenarios and actionable insights, this guide equips your team to navigate the 2026 overhaul with confidence. 📝 Get your guide here: https://hubs.ly/Q03TkXC50 #Nacha #ACH #FraudPrevention

8

Our Chief Risk Office Brian Boates breaks down AI's role in fighting financial crime in the PYMNTS' Headlines That Will Shape Close of 2025 Report. See how we're using real-time detection and more to protect customers and expand what's possible. Full report here: https://lnkd.in/eyPPa7fb

80

One institution can catch fraud. A network can stop it. Shared intelligence gives smaller teams the leverage of much larger ones. We’ll explain how the Peer Fraud Network works in an upcoming webinar.

1

The FFIEC Cybersecurity Assessment Tool (CAT) sunsets on August 31, 2025. But what does this mean for your financial institution? The CRI Profile can be used to help your firm transition. 💡 Learn more about how the CRI Profile is noted as an FFIEC-referenced alternative here: https://lnkd.in/gKPGPRGP

28

1 Comment

Fraud prevention doesn’t start with an alert; it starts with understanding risk. Too often, prevention efforts focus on downstream activity: alerts, reports, and remediation. But effective programs are built upstream, with context, clarity, and collaboration embedded from the start. This Fraud Prevention Month, we’re sharing practical perspectives on what actually strengthens prevention efforts, across compliance, investigations, and enforcement. Prevention isn’t about reacting faster. It’s about building smarter. How does your organization define “prevention”?

3

For Financial Institutions, fraud isn’t just a security issue. It’s an infrastructure problem. Disconnected systems, lead to delayed responses Delayed response = real loss Security has to be built in, not layered on. That’s the shift happening right now. The institutions moving fastest aren’t adding more tools. They’re building connected systems where detection, response, and recovery work together. That’s exactly how we approach it at #BankSocial. → See how institutions are modernizing fraud infrastructure with #Secura https://lnkd.in/e6pejHwt

13

Join DefenseStorm for a 3-part webinar series which will provide a comprehensive journey from understanding the foundational concepts of the FS-ISAC Cyber Fraud Prevention Framework to implementing actionable strategies for effective fraud prevention. In Part 1, "Understanding the FS-ISAC Cyber Fraud Prevention Framework," DefenseStorm's Director of Fraud, Shyam M. and Chief Information Security Officer, William Wetherill will discuss the FS-ISAC Cyber Fraud Prevention Framework, a structured approach designed to enhance collaboration and effectiveness in combating cyber fraud. Key Takeaways: - Overview of the FS-ISAC Cyber Fraud Prevention Framework - Detailed explanation of the five phases of cyber fraud: Recon, Initial Access, Positioning, Execution, and Monetization - The significance of "looking left" and "looking right" to trace and predict criminal activities - The role of cross-team collaboration in effective fraud prevention - The impact on your financial institution REGISTER TODAY! https://cvent.me/B1vMgL #cyberfraud #fraud #cyberrisk #financialservices #creditunions #banks

7

A fundamental publication was recently released by the Association of Certified Fraud Examiners (ACFE) called Anti-Fraud Blueprint: A Foundational Approach to Fraud Risk Management. 📚 As fraud risks continue to evolve, organizations face increasing pressure to adapt their fraud risk management (FRM) programs to meet the complex threat landscape. Building on guidance from the 2020 Anti-Fraud Playbook, the Association of Certified Fraud Examiners (ACFE) and Grant Thornton partnered to create this new report highlighting changes in fraud risks and technologies in recent years and how organizations can build, mature and enhance their FRM programs. 📜 The Anti-Fraud Blueprint provides updated, practical guidance in alignment with the Fraud Risk Management Guide, Second Edition, published in 2023 by the ACFE and COSO. Through detailed analysis, select points of focus, and key questions and checklists, you will become equipped to both assess and strengthen your FRM program for the future. 📩 For more details and to download the full report please follow the link in 1st comment. #acfe #blueprint #AntiFraud

15

1 Comment

SAFE FEDERAL CREDIT UNION transitioned from a capital-heavy #ATM ownership model to a flexible service-based approach—boosting operational agility, enhancing security and creating more meaningful member connections. https://bit.ly/3HxgZIL #AccessExpanded

84

3 Comments

Potential Landmark Change in SAR Reporting for Cannabis Banking FinCEN’s October 9, 2025 FAQs on Suspicious Activity Reporting may signal one of the most significant regulatory shifts in cannabis banking in over a decade. Wouldn’t it be great if FinCEN didn’t require financial institutions to file hundreds of thousands of continuing “Marijuana Limited” SARs every 90 days just for doing business responsibly? Well, this may finally be a reality. Based on my interpretation of this new guidance, financial institutions may no longer be required to file continuing SARs every 90 or 120 days for marijuana-related businesses. FinCEN’s updated language appears to replace the long-standing expectation of recurring “continuing SAR” filings with a more risk-based approach. Under this framework, institutions would only file a new SAR when new or ongoing suspicious activity is detected. If confirmed, this would represent the smartest and most pragmatic regulatory relief the industry has seen since FinCEN issued its 2014 marijuana banking guidance (FIN-2014-G001). It would reduce unnecessary administrative burden while allowing financial institutions to focus on truly suspicious behavior and effective risk monitoring. However, this interpretation requires official clarification from FinCEN. The industry needs to know whether this FAQ indeed supersedes the continuing SAR requirement under the 2014 guidance. If so, it could finally align cannabis banking compliance with modern risk-based AML principles and allow financial institutions to allocate resources more intelligently. To adapt to this changing regulatory environment, I would recommend that institutions utilize tools like VerifyC™ to quickly and efficiently verify and monitor marijuana-related businesses, automatically validate and track license status, and continuously screen the business and its beneficial owners with MonitorC™. StandardC #cannabisbanking Financial Crimes Enforcement Network, US Treasury

13

You can read 56 pages of dense legal material. Or you can follow Michael Huneke and let him do the hard work. 👇 #bis #exportcontrols #appliedmaterials #financialcrime

11