The Risk Horizon Has Shifted. Has Your Institution

Marsh Risk Consulting examines the converging operational, cyber, and geopolitical pressures reshaping financial institutions across the Middle East, and the strategic priorities that will define who is prepared and who is not.

The boundaries that once separated operational, financial, and geopolitical risk are eroding. For financial institutions across the Middle East, this is no longer a forward-looking concern. It is the current operating reality.

Central banks are reviewing business continuity protocols under live conditions. Cyber incidents targeting UAE financial services surged in the opening weeks of 2026. And capital buffers that appear adequate today may be masking significant forward-looking exposure as operational losses take time to fully crystallise.

In this environment, resilience can no longer be treated as a compliance function. It has become a competitive one.

In this paper, Shiva Keihaninejad, PhD, Quantitative Risk Director and SVP for India, Middle East and Africa at Marsh Risk Consulting, sets out a structured framework for financial institutions navigating one of the most complex risk environments in a generation.

The paper addresses six critical priorities:

1. External shocks as operational events. Why geopolitical and cyber risks now translate directly into core operational disruption, and what institutions need to put in place to respond effectively.
2. Operating under continuous stress. How converging risks, third-party dependencies, and digital interconnectivity are changing the resilience challenge, and the monitoring and response capabilities required to manage it.
3. Capital consequences. Why the true cost of operational risk events often arrives later than institutions anticipate, and how ICAAP frameworks, operational risk capital charges, and regulatory expectations need to reflect this reality.
4. The evolving risk function. How risk management is shifting from an oversight role into a strategic function, and what that means for governance, analytics capability, and cross-institutional co-ordination.
5. People as the foundation of resilience. Why talent, leadership, workforce continuity, and third-party human capital are as important to operational resilience as any system or process.
6. Insurance as a strategic enabler. How institutions can move beyond treating insurance as a post-event recovery mechanism and integrate it into a broader, forward-looking resilience strategy.
   

For financial institutions that are serious about remaining competitive and operationally robust in a rapidly changing environment, this paper provides both the strategic context and the practical priorities to act on now.