Navigating 2026: Exam Readiness, AI Risk, and Vendor Strategy for Financial Institutions

In this insightful panel episode, host Keaton Tanzer & Lucas Hathaway at Rivial Security are joined by Darrin Moorer, Senior VP and Information Security Officer at NBKC Bank, and Mike Sloan, Associate VP and ISO at the University of Kentucky Federal Credit Union, for a practical, forward-looking discussion on information security and compliance in financial institutions.Together, they unpack the most surprising and common regulator findings from 2025, discuss smooth exam experiences, and highlight the importance of continuous compliance. The conversation moves to strategies for staying "exam ready" in 2026, emphasizing documentation, ongoing evidence collection, and establishing cross-departmental ownership of risk.AI emerges as both a tool and a threat, prompting conversations around acceptable use policies, risk frameworks, custom training, and incident responses for AI-related scenarios. The panel explores how financial institutions are cautiously rolling out AI, tracking usage, and planning governance committees, while also diving into the complexities surrounding vendor and fourth-party risk assessments.The episode wraps up with budget season advice for 2026, prioritizing measurable risk reduction, the maturation and optimization of security programs, and board-level communication strategies that translate technical achievements into business impact.This episode offers actionable insights, practical tips, and real-world examples for security leaders, managers, and board members in the banking and credit union space as they navigate evolving expectations, technologies, and threats.