Frequently asked questions
Short answers about our guidance, the risk register, the software and training. For anything else, use the contact form.
What does Doorstep International do?
Doorstep International helps banks, insurers, brokerages, money service businesses and fintechs manage AI, model, operational, cyber and compliance risk. It publishes a free risk register organised by banking function, provides cloud risk management software that institutions can start using within 24 hours, and delivers training and advisory work led by founder Ahmer Nehal.
Who is behind Doorstep International?
The founder, Ahmer Nehal, has more than 30 years of experience in governance, risk and compliance with eight large commercial banks across the GCC region, including Mashreq Bank Dubai and HSBC MENA. His roles include Head Risk and Fraud and SVP and Head of Operational and Environmental Risk.
Does SR 26-2 apply to generative AI?
No. SR 26-2, issued on 17 April 2026 by the Federal Reserve, OCC and FDIC, states that generative AI and agentic AI models are outside its scope because they are novel and rapidly evolving. It still expects institutions to use their risk management and governance practices to decide appropriate controls for them.
What is the FSB guidance on AI in financial institutions?
On 15 October 2026 the Financial Stability Board published 12 sound practices for responsible AI adoption. Four cover organisation-wide governance and eight cover the AI life cycle: materiality assessment, technology selection, data governance, explainability, performance evaluation, human oversight, AI-related cyber and ICT risk, and third-party AI dependencies.
Is the risk register free to use?
Yes. Every function in the register can be read free online, with its risks and best-practice controls. You can also request any function as a spreadsheet-ready RCSA workbook (CSV) after confirming your email address with a 6-digit code.
How quickly can we start using the risk management software?
Institutions can start using the cloud subscription within 24 hours of agreeing terms. It is designed for small and mid-sized banks, fintechs, insurers and brokerages that need industry-standard risk management without a long implementation project.
How much does the software cost?
Pricing depends on the number of users, entities and modules you need. Request a demo through the contact form and we will send a quote for your institution.
Do you deliver training outside Pakistan?
Yes. Ahmer Nehal has delivered senior-management training and conference sessions in Pakistan and the UAE. Training can be delivered in-house, at a venue or online. Tell us your location and audience in the contact form.
How do I get in touch?
Use the contact form. We confirm your email address with a 6-digit code and reply within one working day.
Put these controls to work this month
Start on the cloud risk management software within 24 hours, or ask for training or advice tailored to your institution.