
Menghan Xiao
Menghan Xiao is a reporter on the Risk Management desk, based in New York. She earned a bachelor’s in economics from Mount Holyoke College in 2021, and a master’s in journalism from Northwestern University in 2022. Prior to Risk.net, Xiao covered cyber security and technology for SC Media.
Contact Xiao at menghan.xiao@infopro-digital.com
Follow Menghan
Articles by Menghan Xiao
Credit loss database reveals holes in Basel’s IRB formula
Researcher has used two decades of data to propose improved internal model methodology
Banks urged to track vendor AI use, before it’s too late
Veteran third-party risk manager says contract terms and exit plans are crucial safeguards
AI ‘lab’ or no, banks triangulate towards a common approach
Survey shows split between firms with and without centralised R&D. In practice, many pursue hybrid path
Everything, everywhere: 15 AI use cases in play, all at once
Research is top AI use case, best execution bottom; no use is universal, and none shunned, says survey
Researchers, quants, strats – AI is coming for you
Survey IDs roles to be most impacted by front-office AI, but experts say many will change, not disappear
Looming US Basel endgame redraft sparks calls to save IRB
Experts say 20 years of data makes credit risk models more appropriate than standardised approach
How Citi moved GenAI from firm-wide ban to internal roll-out
Bank adopted three specific inward-facing use cases with a unified framework behind them
Fed stress-testing operational readiness of discount window
Experts say consultation on improved ops should be accompanied by focus on willingness to borrow
CFTC weighs third-party risk rules for CCPs
Clearing houses could be required to formally identify and monitor critical vendors
Cyber risk can be modelled like credit risk, says Richmond Fed
US supervisors may begin to use historical datasets to assess risk at banks and system-wide
What Goldman’s appeal victory means for Fed stress tests
Decision could embolden more banks to appeal, analysts say. But others believe result is one-off
MUFG blocks vendors that refuse to reveal subcontractors
Risk Live: US arm of Japanese megabank asks first line to sign written waivers when risk advisories are ignored
Rough patch: CrowdStrike sparks an auto-update debate
Automating software updates helps keep hackers at bay but can introduce op risk; banks balance the two
Banks urged to keep regulators in the loop on AI plans for AML
Risk managers advocate five-year strategies and compliance teams’ ownership of the tech they use
Banks urged to boost third-party scrutiny amid AML crackdown
Three US regulators highlight deficiencies in banks’ due diligence on fintech partners
Should banks risk lightning hitting twice for CrowdStrike?
Bank tech teams divided on whether to give security vendor a second chance after update crash
Let’s grow the third-party risk playbook – CME security chief
CrowdStrike outage highlights need for financial sector to adjust its game plan
CrowdStrike outage spurs rethink on ‘critical’ vendors
Some want US regulators to designate tech firms that pose risks to financial stability
Why was Archegos worse than the Fed’s five-fund stress test?
Some believe Credit Suisse was an outlier, but others say the CCAR results underestimated risks
Fed urged to introduce annual high-rate stress tests
Results of debut scenario were reassuring, but regulators cannot lower their guard
US Fed reveals its five use cases for generative AI
Internal sandbox used to assess viability and risks; coding and content generation on the agenda
House of cards? The $3 trillion (non-systemic) real estate risk
Regional banks share the bulk of US commercial real estate exposure, but the sector’s downturn doesn’t faze them
Bank of America’s Kris Fador elected FS-ISAC board chair
Industry consortium for cyber security also adds new board directors from Swift, PNC, Truist and CME