Evidence-controlled external events
Search documented operational and non-financial risk events by risk, topic, impact, sector, jurisdiction or period.
Each published case separates authoritative findings from the hypothetical scenario, framework relevance and NFRisk practitioner interpretation.
Explore the library
6 approved scenarios currently published.
Additional developed cases remain private until they pass the same evidence controls.
TSB Bank plc
The FCA and PRA found that TSB's data migrated successfully in April 2018, but the new platform failed immediately; disruption affected all branches and a significant proportion of 5.2 million customers, with £48.65 million in combined penalties.
Open NFR-0051Royal Bank of Scotland, NatWest and Ulster Bank
A 2012 software compatibility failure disrupted core banking processes, affected at least 6.5 million UK customers and resulted in £56 million of combined FCA and PRA penalties.
Open NFR-0052Volkswagen AG
Volkswagen pleaded guilty in 2017 to three federal felonies after software distinguished emissions testing from normal driving; the US federal resolution totalled $4.3 billion and concerned approximately 590,000 diesel vehicles.
Open NFR-0085BNP Paribas S.A.
BNP Paribas pleaded guilty in 2014 to conspiring to violate US sanctions law after moving more than $8.8 billion through the US financial system for sanctioned entities; the plea agreement imposed $8.9736 billion in total financial penalties.
Open NFR-0003Siemens AG
Siemens AG and three subsidiaries pleaded guilty to FCPA-related offences in 2008; coordinated US and German resolutions exceeded $1.6 billion and included a four-year independent compliance monitor.
Open NFR-0014Post Office Limited - Horizon
The Court of Appeal found a material risk that apparent branch shortfalls were caused by Horizon bugs, errors or defects and quashed 39 appellants' convictions in 2021; legislation in 2024 then quashed qualifying convictions more broadly.
Open NFR-0044An important distinction
The named organisations in this library are documented external events. They are not presented as NFRisk clients. NFRisk Case Studies separately describe anonymised prior delivery experience; Insights provide longer-form analysis.
Apply the learning
The library is designed to support better questions. NFRisk can turn the relevant pattern into a focused diagnostic, risk architecture or delivery-assurance discussion.