Posted inBest Practices

Before the first crypto transaction, finance needs a seat at the compliance table

When an established company considers holding crypto, the compliance questions usually come first. Is the activity permissible? Is the exchange or custodian acceptable? Have the wallets been screened? Are AML and sanctions controls adequate? Those questions can all have satisfactory answers while the transaction still produces an outcome the institution did not intend. The reason […]

Posted inFellows Meeting

Fellows Networking Meeting

ECI Fellows — please join us on Wednesday, September 23, at 1:00 p.m. ET for our Monthly Virtual Networking Meeting. Our agenda is already taking shape with cutting-edge topics to discuss. The attendance in recent months has been outstanding! As you know, far more than “meets and greets,” these Fellows-only virtual sessions are designed for our ECI […]

Posted inBest Practices

From mainframes to Agentic AI, what legacy system discipline can teach us about building trustworthy customer data platforms

For the past decade, I’ve led customer data and regulatory platforms at one of the world’s largest card issuers, following years modernizing mainframe systems at IBM. The mainframes I maintained early in my career were not sophisticated by modern standards. They earned the trust of the organizations that depended on them anyway, because every transaction […]

Posted inBest Practices

China’s “Mythos moment” is coming. Its release gate is already built.

China’s “Mythos moment” is coming. Its release gate is already built. Washington spent June 2026 governing Mythos-level models for the first time: Systems whose autonomous cyber and agentic capabilities register as national security consequences. The label borrows from Anthropic’s Mythos 5, restricted that month; the government’s attention also reached OpenAI’s GPT-5.6. No Chinese lab has […]

Posted inBest Practices

When compliance reporting creates false assurance

Boards are not short of compliance information. Most receive dashboards, heat maps, training figures, investigation data, audit findings, remediation updates, and regulatory summaries. The difficulty is deciding what all that information really says. A report can be accurate, well presented, and still leave directors with too much confidence. That happens when evidence of activity is […]

Verify your email

We'll send a verification code to .

Gift this article