Six-month recap
H1 2026 Top Takeaways
A summary of the key operational and non-financial risk insights from our work in the first half of 2026
Service
ORX Membership
ORX Lite
Risk programme
All programmes
Takeaways - August 2026
This article summarises the highlights from ORX Membership activities in the first half of 2026, including published reports, community discussions and in-person events. It provides our members and ORX Lite subscribers with operational and non-financial risk (ONFR) insights from across our work.
Topics covered in this article include:
- Strategy and change – How risk leaders are repositioning ONFR to enable faster decision-making, strategic delivery and organisational resilience
- What's happening across the risk landscape – The key risk trends, emerging threats and external developments shaping firms' risk priorities in 2026
- AI – What recent developments mean for cyber risk and AI risk governance
- Third party risk management – How firms are addressing concentration risk, systemic dependencies and strengthening oversight amid heightened regulatory and operational resilience expectations
- Digital and AI strategy – How leading firms are building the capabilities, data foundations and operating models needed to transform ONFR
- Skills for ONFR – The skills and workforce changes required to succeed in an increasingly digital and AI-enabled risk environment
- Measurement and capital – What industry data reveals about changing risk exposures, loss trends and implications for capital and stress testing
Operational and non-financial risk is being reshaped by a faster, more complex and more uncertain environment
Across our H1 2026 research, discussions and events, a consistent message emerged – firms must become faster, more resilient and more focused on the risks that matter most. AI is creating both new threats and opportunities, while geopolitical uncertainty, digital ecosystem concentration risks and growing third-party dependencies are adding complexity to ONFR agendas.
Increasing interconnectedness and the compression of time (in terms of how risks can materialise) are challenging traditional control models, with further uncertainty expected over the next 18 months. In response, leaders see an urgent need to transform ONFR towards a more dynamic, embedded and outcome-focused model, enabled by stronger data foundations and AI capabilities.
Resilience and strategy key for successful risk management
Our Strategic vision for operational & non-financial risk was updated in 2025 to incorporate feedback and developments into the three components of the vision’s ‘pathway to success’:
- Foundations
- Digital core
- Insights and capabilities
As in 2025, we have used this pathway to summarise our work from the first half of 2026.
This year, we continue to see ongoing focus on strategy and resilience. Firms are placing greater emphasis on aligning ONFR with organisational strategy, helping ensure risk is embedded early in business initiatives and contributes directly to their successful delivery.
Additionally, firms are moving from a prevention-led approach to one focused on preparedness, anticipation and recovery, recognising that disruption is inevitable. There is a clear need to fully integrate resilience into risk management, moving beyond treating it as a complementary or compliance exercise, using it instead as a lens for better visibility, insight and decision-making.
Gated content start
This article is available to all ORX members and ORX Lite subscribers
If your firm is a member of ORX or an ORX Lite subscriber, log in or create an account to access the article.
Not a member or subscriber? Talk to us today to discuss how you could join the ORX community.
Gated content stop
What's on the agenda in H2 2026
If you would like more information on any of the topics above, please get in touch. As we move into the second half of 2026, we will continue to develop thinking and practice on these topics and more.
We'll publish another six-month summary towards the end of December. So, if you have any feedback on this article, we'd like to hear from you.
More key projects to come in 2026
- Scoping for a control benchmark service
- Updating the Reference Control Library
- Starting work on our new Risk Management Principles (more information to follow)
- Our programme of autumn events (including ORX Cyber, ORX Scenarios and RiskMinds)
Please note: This content should not be shared outside your organisation, reproduced or used contrary to the terms of your agreement with ORX. It must not be uploaded to, used to train or otherwise support any public or third party-AI system in public AI tools or large language models (LLMs), as this may compromise ORX intellectual property and confidential insights.
Disclaimer: ORX has prepared this resource with care and attention. ORX does not accept responsibility for any errors or omissions. ORX does not warrant the accuracy of the advice, statement or recommendations in this resource. ORX shall not be liable for any loss, expense, damage or claim arising from this resource. The content of this resource does not itself constitute a contractual agreement, and ORX accepts no obligation associated with this resource except as expressly agreed in writing. ©ORX 2026
Contacts:
Steve Bishop
Research and Information Director, ORX
Roland Kennett
Client Success Director, ORX
Helen L’Abbate
Deputy Director - Research & Information, ORX


