In brief: The theme this fortnight isn’t one headline rule - it’s a steady widening of what risk and compliance is asked to cover, and of how teams are evolving to meet it. Dated operational deadlines like the UK’s move to T+1 settlement in October 2027 are drawing closer, with the FCA noting some firms are “considerably behind”; the sharper complexity increasingly sits inside the firm, with different legal entities needing different coverage rather than simply more jurisdictions; and accountability regimes across several regions are maturing to focus on individuals. This edition covers 10–21 August 2026.
The CUBE Read is CUBE's fortnightly take on regulatory change in financial services and what it means for risk and compliance teams.
1. Known deadlines, and the capability to meet them
Some of the most demanding changes ahead aren't sudden - they're known, dated, and moving steadily closer. The UK's transition to a T+1 settlement cycle on 11 October 2027, with interim operational milestones in December 2026, is the clearest case: the FCA has noted some participants are “considerably behind,” with buy-side readiness a particular focus. The FCA's new fund liquidity rules, effective 1 February 2027, add another fixed date to the same runway.
The practical variable is capability - not simply how many people a team has, but whether readiness depends on individuals or on a process that holds regardless. A predictable deadline still needs delivering against, and where preparation rests on one person remaining in post, resilience is worth building in - by embedding the requirement in a repeatable, evidenced process rather than into someone's working knowledge.
What it means for risk and compliance teams: a predictable deadline is easier to plan for than a surprise, but planning is still the work - turning a known requirement into an embedded, tested process, resilient enough that readiness doesn't hinge on any single person.
2. The sharper complexity now sits inside the firm
For years, coverage was framed as a question of breadth: how many jurisdictions a firm had to watch. The sharper question now sits inside the group. A single institution increasingly runs legal entities that each need different regulatory coverage - a UK entity, a German entity and a Luxembourg entity subject to different obligations under one roof - with intra-group oversight duties layered on top.
Regimes like DORA make this concrete: an arrangement between entities in the same group can create subdelegation and regulator-notification obligations that didn't exist when coverage was structured purely by country. The unit of complexity has moved from the map to the org chart.
What it means for risk and compliance teams: coverage measured by jurisdiction count increasingly misses where the real divergence happens - between entities inside a single group, each with its own obligations, oversight duties and notification triggers.
3. Accountability regimes are maturing to focus on individuals
A theme visible across several regions - the UK, the EU and parts of Asia-Pacific - is that accountability regimes, led by the UK’s Senior Managers regime and its many international descendants, are increasingly oriented toward individual senior managers rather than firms alone. It reads less as a spike in enforcement than as a settling-in of frameworks that have been building for years.
The practical implication is about documentation. As individual accountability becomes the norm, the value of a clear, contemporaneous record rises accordingly - not only what was decided and when, but which obligation it related to, which entity it applied to, and what the rule required at the time. That's a governance habit rather than a fire drill: it's what lets a senior manager show, as a matter of routine, how they discharged their responsibilities - far easier where the underlying regulatory change was already tracked than where the trail hamuste rebuilt later.
What it means for risk and compliance teams: the useful response is establishing routine rather than being reactive. Building evidence of decisions into normal process - rather than reconstructing it after the fact - is part of how the accountability framework is meant to work, and it rests on knowing, at the time, which obligations changed and who they applied to.
The through-line
Across all three, the same underlying pattern: the risk and compliance remit keeps widening - more individual accountability, more fixed deadlines, more intra-group complexity, as teams evolve how they work. Increasingly it's capability, not awareness, that firms are building for: the headroom to act on what teams can already see. It's what CUBE is built for: applying AI to regulatory workflows, built on 15 years of regulatory data, inside the platforms risk and compliance teams already use.
Frequently asked questions
When does the UK move to T+1 settlement?
The UK transitions to a T+1 settlement cycle on 11 October 2027, with interim operational milestones expected by December 2026. The FCA has said some firms are considerably behind and has flagged buy-side readiness for particular scrutiny, warning it may act if preparations lag.
When do the FCA's new fund liquidity rules take effect?
The FCA's fund liquidity rules (PS26/17) take effect on 1 February 2027, with transitional provisions for certain requirements, such as updating fund prospectuses, running until 1 August 2027.
What does the move toward individual accountability mean for senior managers?
Accountability regimes such as the UK's Senior Managers regime, and their international equivalents, increasingly attach responsibility to individuals as well as firms. In practice this raises the value of keeping a clear, contemporaneous record of how supervisory decisions were made - a routine governance habit rather than a response to any single event.
Why isn't jurisdiction count a good measure of coverage complexity?
A single group can run multiple legal entities that each face different obligations, with intra-group oversight and notification duties - for example under DORA - layered on top. The complexity increasingly sits between entities inside one firm, not just across countries.
How often is The CUBE Read published?
Fortnightly. Each edition covers the regulatory developments most relevant to risk and compliance teams in financial services.
Sources: FCA T+1 settlement expectations and readiness update; FCA PS26/17 fund liquidity rules; SEC crypto registration exemption proposal; ESMA third-country CCP exposure consultation; FCA unregulated mini-bond and loan-note warning. The CUBE Read is published by CUBE.