It was unfortunate to hear in the news again that RBS has suffered from the triggering of conduct risk in the loss of 660,000 payments related to performing changes to its IT systems.
It reminds us all that performing changes to complex legacy systems is inherently risky. RBS has invested in systems to protect against this but even with that protection, IT outages can still be triggered.
Changes with this level of complexity need safeguards in the live event itself to be able to anticipate risk and also a platform for rehearsal and simulation of the event itself.
It is hard to be too prepared with contingency and recovery plans in these circumstances.