How Risk Models Are Failing in an Unpredictable System

Risk management in financial services is entering a period of profound transformation that leaves exposure evolving faster than banks are able to measure.

CeFPro’s latest Risk Outlook 2026 survey reveals that the traditional foundations of the discipline – grounded in historical data, quantification, and model-driven insight – are being challenged by a new generation of risks that are increasingly difficult to measure, predict, or even fully understand.

The report reveals a clear shift in how risk leaders view the landscape. While familiar threats such as credit deterioration, liquidity stress, and market volatility remain important, they are no longer the dominant concern.

Instead, technology-driven risks, systemic dependencies, and geopolitical fragmentation are rapidly moving to the top of the agenda.

Artificial intelligence and emerging technologies now sit at the center of this transformation. According to the report, 52% of respondents rank AI and emerging technology risk as the most significant threat facing financial institutions today.

Yet the issue is not simply the technology itself, but the speed at which it is evolving relative to governance frameworks.

As one industry participant observes, “AI is evolving faster than governance frameworks and regulation. That gap is where a lot of the real risk now sits.”

This widening gap highlights a deeper structural challenge. Many of today’s most material risks do not behave like traditional financial exposures.

They are interconnected, externally driven, and often lack historical precedent. As a result, they resist the types of modeling approaches that have long underpinned risk management.

“We’ve always been able to model risk using past events. The challenge today is that many of the most significant risks have no historical precedent,” notes a member of CeFPro’s Advisory Board.

This shift is forcing risk leaders to rethink the very definition of risk. Increasingly, the conversation is moving beyond measurable probabilities toward a broader concept of uncertainty.

As one expert puts it, “We’re not really dealing with risk in the classical sense anymore. What we’re dealing with is uncertainty.”

Technology is not only introducing new risks – it is also reshaping how risks propagate through the financial system.

Institutions are now deeply embedded within complex digital ecosystems, reliant on shared infrastructure such as cloud providers, data platforms, and third-party services.

This interconnectedness creates new vulnerabilities. A disruption in a single critical provider can cascade across multiple institutions, amplifying its impact.