Welcome to the Analyst Blog — where you get all the latest news and perspectives for your industry. Read, comment and rate posts written by our analysts. And be sure to subscribe (by clicking on the e-mail icon in the upper right hand corner), so you can keep up with new content and comments easily.

Recent discussions with colleagues and industry professionals reveal that Enterprise Risk Management (ERM) is a term that is thrown around in many different arenas with many different interpretations. The intent of this blog entry is to place my definition of ERM into the mix and then invite community members to weigh in based on their opinion and experience.

We have just released Part 1 of our annual EMEA core banking deal review for 2009. The results are not surprising, it was not an easy year for vendors to get banks to sign on the doted line. However, what is clear from this year's results is that the EMEA marketplace for traditional core banking systems has changed. The previous trend for more packaged and complete banking systems and capabilities appropriate for tiers 1 and 4 institutions has reversed in favor of a more modular and component-based replacement cycle. It was also great to see that as predicted in our 2008 review, results for 2009 mostly originated from the Middle Eastern banks and in particular be driven by Islamic Banking deals. The tally of deals by region shows 35% of deals coming from the region, both from generic core system vendors and specialist regional players. Now more than ever vendors must tailor their roadmap to cater for two significant trends: Geographic Requirements and Architectural Readiness.

This past spring, I surveyed a variety of tier 1 and tier 2 senior risk officers on a number of enterprise risk topics. Some of the most interesting discussions during that survey were around systemic and systematic risk and how senior risk officers are dealing with the impacts of both on their institutions and portfolios. According to our survey, 58% of risk officers are concerned about heightened levels of systematic risk over the next 12 months.

On May 25, 2010, MasterCard announced that it would be opening up its payments technologies to developers via open APIs (Application Programming Interfaces). This echoes similar initiatives by PayPal and Amazon. Left unclear, however, is exactly what this means. Unlike PayPal, whose X development platform is the most appropriate comparison, MasterCard does not operate its own payment system, instead relying on financial institutions and other third parties (like, ironically, PayPal) to provide the customer-facing components.

There is a lot of buzz about all things mobile these days and we all have to thank Apple for igniting the mobile market and bringing a better device to market than what was previously available. The problem with all this media interest is several market nuances get lost in the rush to cover an emerging story. Many people believe mobile banking and mobile payments are the same thing. Fortunately they are not. One is relatively easy and the other more complex. My belief is that one will take the market by storm, the other will remain elusive for years to come.

For over 20 years Experian has been hosting an annual conference focused on credit risk issues that financial institutions face with consumer and commercial credit. Experian does an excellent job of staying focused on providing intellectual property that their customers and interested industry professionals can take back and apply in their spheres of influence. This year’s event featured three diverse keynote speakers covering areas of business philosophy, economics and leadership as well as over 80 breakout sessions on risk and business topics. Malcom Gladwell focused on the themes of puzzles and mysteries and the role of information. For me, puzzles and mysteries have a strong correlation to risk management and how we approach data and technology.

Bank of America, Commonwealth Bank of Australia, and Deutsche Bank today announced formation of a technology buying alliance which they see as a way to reduce their infrastructure costs and forge ahead into cloud computing. What these banks are really fighting against are the hefty maintenance fees their technology suppliers are assessing. They believe that by joining together, they can force a change in procurement practices and move to more shared or even open source solutions when they make sense.

This week, a cacophony of risk management professionals descended on Boston for the annual Risk and Insurance Management Societies (RIMS) annual conference. As global economies begin to dig themselves out from the recession, a recent finding from my survey of senior risk managers shows that 56% of respondents are concerned about increased levels of global systematic risk during the next 12 months. While this survey shows several areas of elevated risk awareness, nearly 5,000 RIMS attendees and over 400 solutions exhibitors are evidence that risk management across disciplines is a prime focus.

The first quarter of 2010 is behind us, and it was a busy month for the FDIC shutting down 41 institutions. This was down from 45 in the last quarter of 2009, and 49 in the third quarter of last year - but almost double the number of failed banks in the first quarter of 2009 The cost of these failures however does appear to be stabilizing as:
The concern now is for the large pipeline of troubled institutions, which is over 10% of all remaining banks as of the last quarter of 2009. Will the economic recovery being experienced come soon enough or have they already taken a bite of the poisoned apple? Delinquencies on mortgages continue to rise, foreclosures may be back on the increase, first time home buyers credit is set to expire and more and more people are underwater even though home prices have stabilized or are beginning to appreciate in some metro markets. Will this be a dead cat bounce in home values, an expression used mostly to describe a short rally for a stock before another drop in value? Let's hope not.
What then does this ultimately mean for the financial services industry and those who sell into it? At IDC Financial Insights, we continue to believe that bank failures will slow later in 2010 as the economy continues to recover. In fact, we have heard of some financial institutions actually taking on significant new IT projects and ramping up the hiring of IT personnel that had been let go during the crisis. It may be too early to feel anything more than slightly positive about these trends, but after the darkness of the last 18 months we will take what we can get. Login to the IDC Financial Insights community where you can get a graphic of these data points and also provide your feedback.

The current issues dominating risk management agendas for bankers are data, changes to regulation and how to allocate scarce capital investment dollars to bolster risk assessments, processes and reporting. This video blog assesses current enterprise risk management isssues. I invite you to listen and more importantly, log in and offer your opinions.

All aboard! The global risk management train is now leaving the station. Our arrival time at “The New Normal” will be in 3 years and it is very likely we will experience delays and holding patterns in route due to dysfunctional infrastructure, central control problems and lack of effective resources. What is "The New Normal"? It is a state of regulation and business realities that will take 2-3 years to settle in but will represent permanent change for the financial services system. Participants in the new normal will be financial institutions, regulators, technology providers and customers (of financial institutions).

Chairman Sheila Bair of the FDIC gave her fourth quarter update on February 23rd regarding the state of the US Banks. Here are some of the highlights.

Two weeks ago I put out an informal LinkedIn poll asking "What areas of risk need the greatest investment over the next 12 months?" I call it an informal poll because the sample was not controlled, but the poll was extended initially to my network which includes a wide array of risk professionals (both parishioners and consultants) across enterprise risk. I also extended the question to a couple of international LinkedIn risk groups. I received approximately 50 responses and, while at first the results were volatile, as additional responses came in the results settled down. I created the poll with an analytical suspicion and the poll has verified my thinking.

In a press release yesterday morning and following an active rumor mill, Sybase announced its acquisition of Aleri. This comes less than a year after Aleri itself acquired CEP competitor Coral8, which we talked about in a blog last year. Don Deloach will be leaving Aleri and no other terms of the deal were announced, nor any specifics regarding this year's Aleri / Coral8 platform changes, code named Ohio. That leaves StreamBase and Esper as the last independents.

In talking with both end users and vendors to financial services companies, a common truth on future regulation is beginning to take shape. Heretofore, regulators and financial institutions have been focused on aggregating data and applying business analytics to arrive at regulatory capital or economic capital. Capital in these cases is equity that an organization maintains as a percentage of assets. Simply stated, this means the level of equity a company has to sustain devaluations in its assets (such as loan losses or market instruments including derivatives, etc…) that are marked down or devalued. There is a shift in thinking taking place that will drive the financial services industry to evolve regulatory capital towards the concept of balance sheet risk management.