Practice & Projects
AI Fraud Detection: T-NEX Wins Bank Rakyat Award
T-NEX wins Bank Rakyat’s Grand Award with two finalists: AI fraud detection and credit assessment with CCPT scoring. Insights for banking teams.
DEEN
Articles
Expertise for banks: regulation, AI and practice
Analyses and practice-oriented articles by the T-NEX editorial team: regulation, AI and governance, technology and operations, practice and projects. The articles identify their sources and the date of the current revision. T-NEX GmbH is the publisher.
32 articles
Regulation
DORA register of information: content and submission
The DORA register of information: record contracts, identifiers and supply chains using the EU templates and BaFin requirements.
Technology & Operations
GRC software and AI: 682 providers compared
Compare 682 GRC providers worldwide: specific AI functions, vendor sources and specialist areas. With detailed profiles and a Europe selection.
Technology & Operations
GRC software Europe: providers and AI selection
379 GRC providers in Europe, 320 of them with documented AI. Countries, specialist areas and review questions for banks and regulated companies.
Practice & Projects
IT cost controlling in banks: practical case & templates
Allocate and manage IT costs in banks: budget, forecast and cost allocation in a fully worked calculation case. With AI review questions and free worksheets.
Technology & Operations
Automating compliance in banks: process and AI
How banks support compliance tasks with AI and workflows: requirements, gap analysis, approvals and evidence. With a continuous sample case.
Regulation
DORA third-party management in practice
Assessing and managing changes at ICT service providers: a DORA practical case for banks with an evidence matrix, decision template and Banking Platform reference.
Regulation
NIS2 vs DORA: what applies to banks and their IT?
NIS2 and DORA for banks: compare scope, BSI registration, reporting deadlines and ICT providers, with references to Germany’s BSIG.
AI & Governance
RAG chatbots for banks: sources and answer quality
How RAG chatbots retrieve documents and support answers, with checks for permissions, knowledge maintenance and answer quality.
AI & Governance
AI agents in banking: operating limits and control
AI agents in financial institutions: limit tasks and permissions, assess approvals and trace actions under MaRisk, DORA and the AI Act.
AI & Governance
EU AI Act for banks: classification and duties
The AI Act for banks after the July 2026 amendment: high-risk classification, transparency and current application dates.
Regulation
EU AML package: AMLR, AMLD6 and AMLA
AMLR from 10 July 2027, staged AMLD6 implementation and AMLA supervision: responsibilities and dates financial institutions need to assess.
Technology & Operations
GRC software for banks: selection criteria
Assess GRC software through functions, contractual requirements and operating evidence under MaRisk and DORA.
Regulation
Regulatory roadmap for banks: dates from 2026 to 2028
Key banking dates for DORA, MaRisk, AI regulation and anti-money laundering, with sources distinguishing applicable law from plans.
Regulation
Ninth MaRisk amendment: changes and implementation
The ninth MaRisk amendment has applied since 30 June 2026. Changes from the previous version and implementation checks for institutions.
Regulation
MaRisk 2026: current version and requirements
MaRisk under Circular 06/2026: scope, structure and relationship with DORA, including the limited transition and investment-firm distinction.
Regulation
DORA for financial entities: duties and implementation
DORA since 17 January 2025: scope, ICT risk, incident reporting and third parties, with primary sources and implementation checks.
Regulation
Using ICAAP and ILAAP to manage a bank
ICAAP and ILAAP for banks in Germany: normative and economic perspectives, a worked example, SREP and the ECB's July 2026 clarifications.
Regulation
Understanding P2R and P2G
Understand P2R and P2G, CET1 composition and MDA. A worked capital example and 2026 methodology changes for ECB banks and German LSIs.
Regulation
MaRisk AT 9 and DORA in third-party management
Classify outsourcing and ICT services under MaRisk AT 9 and DORA Articles 28–30. Contracts, registers, risk assessments and practical exit testing.
Regulation
Planning for CRR III, the output floor and FRTB
CRR III since 2025: the output floor rises from 55% in 2026 to 72.5% from 2030. Worked calculation and FRTB transitional measures for 2027–2029.
Regulation
IReF: prepare data and reporting processes early
IReF for banks: planned pilot from Q2 2030 and official reporting from Q2 2031. How BIRD, AnaCredit and supervisory reporting differ, and how to prepare data.
Regulation
Which EBA guideline belongs to which task?
A curated map connects guideline identifiers, business topics and German supervisory practice. It starts with the implementation list in MaRisk of 30 June 2026.
Regulation
Introducing GRC software: migrating registers and evidence from Excel
A GRC migration starts with fields, responsibilities and data quality. This sequence moves from the existing workbook through a trial run to business acceptance.
Regulation
DORA TLPT: who needs testing and how is it prepared?
TLPT is advanced testing for financial entities identified by the supervisor. Selection follows DORA and Commission Delegated Regulation (EU) 2025/1190.
Regulation
ICAAP and SREP: processes and decision foundations at a glance
The SREP connects business model, governance, capital risks and liquidity risks. Banks need a consistent account of their data, assumptions, decisions and outstanding actions.
Regulation
COREP and FINREP: differences and a shared data foundation
COREP principally addresses prudential risks and own funds. FINREP provides standardised financial information. Reliable reporting requires aligned definitions, sources and reconciliations.
Regulation
The business case for GRC software: calculating costs and benefits
A sound business case compares current operations with specific alternatives. It shows implementation effort, recurring cost and evidenced benefits over the same period.
Regulation
Solvency II: understanding capital requirements, ORSA and reporting
Solvency II combines quantitative capital requirements with governance and reporting. This overview explains SCR, MCR and the role of ORSA in managing an insurer.
Regulation
AML sanctions screening: reviewing matches and documenting decisions
Sanctions screening requires current legal and list data, appropriate matching and traceable alert handling. A similar name starts an investigation.
Regulation
ISO 27001 and IT-Grundschutz: which approach fits your ISMS?
ISO/IEC 27001 defines requirements for an information security management system. IT-Grundschutz adds a concrete methodology and building blocks. Begin with scope and the evidence you need.
Regulation
GDPR retention periods in banks: classifying records correctly
Bank data has no single retention period. A deletion policy connects record type, legal basis, start date and justified exceptions with the data actually held.
Topic areas
What the four categories cover
Regulation
Regulation here means DORA, MaRisk, BAIT and European supervisory practice, explained from primary sources. Every article names the legal act, the article and the exact reference, so each statement remains verifiable and can be carried straight into your own implementation.
AI & Governance
AI and governance covers the use of language models in banks: control frameworks, traceability, source binding and the question of when an AI answer holds up in an audit. The benchmark is supervisory expectation, not what is technically possible.
Technology & Operations
Technology and operations shows how AI systems actually run in banking environments: architecture, hosting in the EU, operating models and outsourcing questions, described concretely enough that IT, business and internal audit speak the same language.
Practice & Projects
Practice articles explain individual steps and decisions from documented projects. Measurements are identified with the test or operating conditions they describe.