Risk & Rebels

The Monthly Letter

Issue No. 1 | July 2026

Welcome to the first issue of Risk & Rebels.

Over the last few years, something unexpected has happened. I started RayCor thinking my work would revolve around regulations, licensing, examinations, and helping companies build stronger compliance programs. I still spend plenty of time doing those things, but somewhere along the way I realized the regulations were rarely the most interesting part of the conversation (sorry diehards and policy wonks!)

The conversations I remember are the ones where a founder is trying to figure out how to scale without losing control of the business. The board meeting where nobody can agree on who actually owns a decision, or the executive team convinced they have a compliance problem, when what they really have is an accountability problem, or the discussions about AI that quickly turn into discussions about leadership.

After a while, you stop seeing individual companies and you start observing patterns.

That's one of the unexpected gifts of consulting. You get a front-row seat to hundreds of organizations, each convinced their situation is unique, only to realize many of them are wrestling with the same handful of challenges: different industries, different products and different personalities. The details change, but the underlying problems are surprisingly familiar.

Those patterns have changed the way I think about governance, leadership, technology, and even compliance itself. More importantly, they've changed the questions I ask. That's why this newsletter looks a little different.

Every month, I want to share one idea I can't stop thinking about, a few observations from the field, and one conversation I think is worth your time. Sometimes it'll be about AI. Sometimes it'll be about financial crime, leadership, organizational psychology, or the strange ways companies solve problems they don't fully understand yet.

The common thread here is no longer compliance; instead, we’re focusing on judgment.

So, welcome to Risk & Rebels. I'm glad you're here.

FEATURE

When Compliance Becomes Organizational Glue

One of the unexpected perks of writing online is seeing which ideas quietly disappear and which ones take on a life of their own.

Recently I wrote a LinkedIn post with a simple observation: somewhere along the way, a lot of Chief Compliance Officers inherited a job they were never actually hired to do. I thought a few people might relate. Instead, it became one of the biggest conversations I've had all year.

What fascinated me wasn't the number of likes or shares, which is what I thought would be unique, but really the surprises came in the landslide of DMs.

"I thought this only happened where I work."

"I've been trying to explain this for years."

"You’re putting into words what I’ve felt forever."

That reaction told me something important. People weren’t responding because the post was about compliance. They were responding because they’d experienced the same dynamic inside their own organizations; in other words, they felt seen.

I've lost count of how many companies I've worked with where the Chief Compliance Officer quietly became the connective tissue holding everything together. Product has a question? Ask Compliance. Operations isn't sure who owns a process? Ask Compliance. Legal and the business can't agree? Ask Compliance. Nobody wants to make the decision? Well, Compliance will figure it out.

At first glance, it almost looks like a compliment. Compliance is trusted. Compliance is involved. Compliance has a seat at the table. But after you've seen it enough times, you realize something else is happening.

The organization is relying on Compliance because ambiguity has to land somewhere, and the Chief Compliance Officer is usually the person least likely to say, "That's someone else's problem." That's a dangerous way to scale.

Growing organizations naturally become more complex. New products, new markets, new regulators, more people, more opinions. Complexity isn't the problem. The problem is what happens when ownership doesn't keep up with growth.

Instead of deciding who owns a decision, companies often add another approval. Another review. Another meeting. Another person who needs to sign off before anything can move forward. Everyone feels a little safer, but nobody notices that decision-making has quietly become slower, murkier, and increasingly dependent on the same handful of people.

Eventually the Chief Compliance Officer becomes less of a compliance leader and more of an air traffic controller. Every difficult conversation circles back to the same desk, not because the regulations require it, but because the organization never built a better system.

Ironically, the strongest governance programs I've seen look almost nothing like that. The most successful companies don't involve compliance in every decision. They involve Compliance in the decisions where Compliance adds value. They know who owns what. They know when Legal should lead, when Product should lead, when Risk should weigh in, and when the business should simply make a decision and move. That's what mature governance looks like, because clarity is one of the few things that helps organizations move both faster and safer at the same time.

The older I get, the less interested I become in talking about compliance as a standalone function. Compliance doesn't exist in a vacuum. It's one piece of a much larger system that includes leadership, incentives, culture, technology, and decision-making. You can write all the policies you want, but if nobody knows who owns the hard decisions, those policies will only take you so far. That's the conversation I think we should be having more often.

"A surprising number of companies don't actually have a compliance problem. They have an ownership problem. Compliance is simply where it becomes visible."

🎙 Why I Started Risk & Rebels

For the last few years, people have been encouraging me to start a podcast. I kept saying no. Not because I didn’t want to do it, but because I wasn’t interested in creating another interview show that disappeared into the noise. I wanted to wait until I knew exactly what conversations I wanted to have.

The conversations I've always enjoyed most happen after the meeting ends or before it ever even starts. That's when people stop giving polished answers and start talking honestly about what they're building, what's keeping them up at night, and the trade-offs they don't usually discuss in public.

That's the spirit behind Risk & Rebels.

Episode 0 is a short introduction to why I finally decided to do this, what I hope you'll get out of it, and where I think these conversations can go. I hope you'll join me.

Risk & Rebels: Episode 0 (YouTube)

FIELD NOTES

Four Things I've Been Noticing Lately

One of the things I enjoy most about consulting is that I get to see organizations at very different stages. Early-stage fintechs and public companies, banks and founders building from scratch. Teams preparing for an examination, teams coming out of one… The details are always different, but every month I find myself writing down little observations that seem to show up over and over again. Here are four from July:

1. AI is Exposing Problems That Were Already There

AI gets blamed for creating governance challenges, but in many cases it's simply shining a light on issues that already existed. If nobody knew who owned a decision before AI, introducing AI isn't going to magically solve that problem. It usually makes it impossible to ignore.

1. Governance Should Make Organizations Faster

Somewhere along the way, governance developed a reputation for slowing everything down. The strongest organizations I've worked with have shown me the opposite. Good governance removes uncertainty. When people know who owns a decision and how decisions get made, work moves faster because fewer things get stuck waiting for approval.

1. The Smartest People Ask the Simplest Questions

I've spent enough time with founders, executives, and regulators to notice something interesting. The people with the deepest expertise rarely try to impress anyone with complexity. They keep asking deceptively simple questions until everyone realizes they were solving the wrong problem.

1. Trust Compounds

Whether it's a regulator, a bank partner, a client, or your own team, trust is built long before you actually need it. Every difficult conversation becomes easier when you've consistently shown good judgment over time.

BEHIND THE SCENES

A few things keeping me busy this month…

The biggest one, of course, is launching Risk & Rebels. This has been sitting on my whiteboard for far longer than I'd like to admit, and it finally felt like the right time to stop talking about it and actually hit record. Building something from scratch is equal parts exciting and humbling, and this month has been a good reminder that sometimes you just have to stop waiting for perfect and press publish.

I've also been continuing work on AIRE 2.0, which has evolved quite a bit from where it started. What began as an AI governance toolkit is becoming something much broader: a practical operating framework for organizations trying to implement AI responsibly without drowning in documentation for documentation's sake.

Outside of that, I've been spending a lot of time preparing for upcoming speaking engagements and having conversations with founders, bank executives, and compliance leaders who are all wrestling with a surprisingly similar question: how do we build organizations that continue making good decisions as they grow?

It's a fascinating time to be doing this work.

ICYMI (IN CASE YOU MISSED IT)

📌 The conversation that started this month's essay.

A LinkedIn post about Chief Compliance Officers unexpectedly became one of the most engaging discussions I've had all year. If you haven't seen the comments yet, they're worth reading almost as much as the post itself.

→ https://www.linkedin.com/feed/update/urn:li:activity:7483508979143475201/

🎙 Risk & Rebels is officially live!

Episode 0 is a short introduction to what this podcast is, why I started it, and the kinds of conversations you can expect going forward.

→ Risk & Rebels: Episode 0

🌐 RayCor has a new home.

After months of work behind the scenes, the new website is finally live. It reflects where the business is headed, not just where it's been.

→ http://www.raycorconsulting.com/

ONE MORE THOUGHT

The longer I do this work, the less convinced I become that organizations succeed because they have all the right answers. The best leaders I've met are usually the first to admit they don't. What separates them isn't certainty or ego, but an innate curiosity. They ask better questions, invite different perspectives into the room, and aren't afraid to rethink decisions when new information comes along.

That's become one of my favorite things about this profession. Every client, every conversation, every project reminds me there's always another way to look at the problem. I hope this newsletter does the same.

Until next month…

If someone forwarded this newsletter to you and you enjoyed it, I'd love to have you join us. Every month I'll share one idea I can't stop thinking about, a few observations from the field, and one conversation worth your time.

If something in this issue resonated with you, or even if you completely disagree with it, hit Reply and let me know. I read every email personally, and some of my favorite conversations have started exactly that way.

Christina

Founder & CEO, RayCor Consulting