Risk.net Study: Enterprise Risk Influence Outweighs Formal Veto Rights

Formal veto rights over business decisions remain concentrated among the largest lenders in the global banking sector, yet these powerful levers are deployed only as a last resort according to a 52-bank study published on Risk.net. Enterprise risk management teams across major financial institutions are managing expanding mandates that now encompass artificial intelligence and geopolitical risk, even as their headcount remains flat or reduced. risk.net reported that while influence runs deeper than any formal veto within enterprise risk, the operational friction between second-line risk units and other bank divisions persists across disparate systems.

Concentrated Veto Rights And Rare Deployments Across Major Lenders

Formal veto authority over core business decisions is held by only a minority of enterprise risk management teams within the surveyed institutions. When these teams do possess veto power, they treat it as an emergency mechanism rather than a routine management tool. risk.net reported that four in five banks breached their established risk appetite thresholds over the past year. Institutions reporting no such breaches generally operate skinnier appetite frameworks despite utilizing similar governance mechanisms.

Expanding Mandates Against Flat Headcount And Technological Friction

The majority of institutions report flat to down staffing levels despite this growing workload. Enterprise risk managers frequently contend with disparate technological systems, poor user experiences, and persistent reporting gaps rooted in decisions made by other divisions of the bank. At larger lenders, enterprise risk teams own the underlying scenario frameworks, shouldering the responsibility to provide effective challenge on scenario construction across isolated risk silos.

Supervisors Demand More Engagement as Banks Test AI

Banking supervisors are demanding more frequent engagement from risk departments even though formal regulatory requirements for enterprise risk functions remain unchanged. More than half of the surveyed banks reported rising supervisory contact over the assessment period. Meanwhile, risk managers are maintaining a cautious stance toward artificial intelligence adoption. According to risk.net, enterprise risk teams remain largely in the testing mode for artificial intelligence use cases. The second line of defense is also frequently excluded when banks execute new product launches or enter new markets.

Banks Struggle to Bridge Risk Appetite with Execution

Financial institutions continue to grapple with how to effectively bridge the gap between risk appetite frameworks and everyday commercial execution. Banks have yet to fully resolve how second-line risk functions can maintain meaningful oversight during fast-paced product launches and market entries without creating operational bottlenecks.