Testing Your Read on Regulator Priorities Before You Spend

Start by writing the assumptions down

Most leadership teams do not actually know what they assume about regulators. They have a shared mood, a set of half-articulated beliefs absorbed from board papers, conference panels, and the General Counsel's instincts. That is not a position you can test.

Before anything else, force the assumptions into writing. Convene the executives sponsoring the compliance investment and ask each to answer, in one sentence each:

• What is the regulator's top priority for our sector in the next 12 to 18 months?
• What specifically do they expect us to do about it?
• What would good look like in their eyes, and how do we know?
• What is the cost of being wrong about this?

You will find immediate divergence. The CRO thinks it is operational resilience. The Head of Compliance thinks it is consumer duty outcomes testing. The CEO has heard it is governance over AI models. That divergence is the point. You cannot validate a single view because you do not yet hold one.

Separate the signal sources

Once assumptions are explicit, trace each one back to its source. Categorise them honestly:

• Published signal: speeches, Dear CEO letters, portfolio letters, business plans, enforcement notices.
• Direct signal: things your supervisor has actually said to you, in writing or in meetings, with dates.
• Inferred signal: what your advisors, peers, or industry bodies believe is coming.
• Folklore: things "everyone knows" with no traceable origin.

Most assumptions driving compliance spend sit in the third and fourth categories. That is where the risk lives. If your investment case rests on folklore, stop and verify before you write a cheque.

Build a triangulation exercise

Validation is not a single conversation. It is triangulation across at least three independent vantage points:

1. The supervisor's own words. Re-read the last 18 months of your firm-specific correspondence, your last two periodic supervisory letters, and any thematic review feedback. Highlight the verbs. Regulators telegraph priorities through what they ask you to evidence, not through what they say in keynotes.
2. The peer signal. Talk to two or three counterparts at comparable firms. Not about their controls, about what their supervisors are pushing on in meetings. Patterns across firms reveal supervisory themes that no single letter will spell out.
3. The former insider view. A structured conversation with someone who recently left the relevant regulator, ideally from the team that supervises you, is the single highest-value input available. They will tell you what the internal grading scheme actually rewards, where the supervisor is under pressure from above, and which of your assumptions are stale.

Where all three sources agree, you have a validated priority. Where they disagree, you have a question that needs a direct test.

Use a low-stakes test before the big spend

If you still have material uncertainty, create a controlled moment to test the assumption directly. Options, in increasing order of formality:

• Raise the topic in your next routine supervisory meeting and watch the response carefully. Engagement, follow-up questions, and tone matter as much as content.
• Submit a short, well-framed paper outlining your proposed approach and ask for feedback before formal investment. Supervisors rarely volunteer views, but they will react to a concrete proposal.
• Where appropriate, use industry association channels to surface the question collectively. Regulators often respond more candidly to sector-wide queries than to single-firm ones.

What good looks like

A validated priority has three features: it is described in the regulator's own language, it is consistent across at least three independent sources, and it is specific enough that you can name the evidence the supervisor would expect to see. If you cannot meet all three tests, you are not ready to commit the investment.

What most teams get wrong

They verify the priority but not the expected response. The regulator's concern about, say, third-party risk is real, but your assumption about what they want you to do about it is where the money gets wasted. Validate both.

The decision point

Before your next compliance investment paper goes to the board, ask one question: can we name the specific evidence our supervisor would point to as proof we got this right? If the answer is no, the paper is not ready. Send the team back to triangulate.