Goldman at 30% Recession Odds: When Geopolitical Conflict Creates Systemic Financial Stress
BankingGlobal Financial System (Systemic)March 25, 2026 (Goldman Sachs recession probability update)

Goldman at 30% Recession Odds: When Geopolitical Conflict Creates Systemic Financial Stress

On March 25, 2026, Goldman Sachs raised its US recession probability to 30% amid Iran conflict-driven oil price shocks — demonstrating how geopolitical events create cascading stress across financial systems that operational resilience must withstand.

Published

Key Metrics

Recession Probability

30%

was: 15%

Doubled in weeks due to Iran conflict

Oil Price Impact

>$120/barrel

was: ~$80/barrel

50%+ increase from Gulf supply disruption

Trading Volume Increase

200-300% above normal

was: Normal levels

Crisis-driven volatility

Stress Duration

Sustained crisis (weeks/months)

was: Discrete events (hours/days)

Tests organizational endurance, not just technical

The Situation

Multi-Dimensional Stress: Technology Under Financial Pressure

A geopolitically-driven financial crisis creates operational stress that is qualitatively different from a technology outage. The stress is sustained, multi-dimensional, and affects the entire system simultaneously.

Transaction Volume Spikes

Financial market volatility drives dramatic increases in transaction volumes. During the March 2026 market turbulence, trading volumes on major exchanges increased by 200-300% compared to normal levels. Payment processing volumes spiked as businesses and consumers adjusted to changing economic conditions. These volume spikes stress technology infrastructure — database throughput, message queue capacity, network bandwidth — and can cause system degradation or failure if capacity planning has not accounted for crisis-level demand.

DORA Art. 7 requires financial entities to use ICT systems that have "sufficient capacity." The Goldman recession warning and associated market volatility demonstrated that "sufficient capacity" must account for crisis-level volumes, not just normal operations. Capacity that is adequate for a normal trading day may be insufficient when volumes triple.

Credit Monitoring Intensification

As recession probability increases, financial institutions intensify credit monitoring — reviewing loan portfolios, reassessing collateral values, and increasing the frequency of risk calculations. These activities impose heavy demands on data processing infrastructure, risk calculation engines, and reporting systems. If these systems were dimensioned for normal-state credit monitoring, the crisis-state demands may exceed their capacity.

Customer Service Surge

Financial stress drives customer inquiries. Customers concerned about their savings, loan repayments, and investment portfolios contact their financial institutions in unprecedented volumes. Digital channels — mobile apps, chatbots, web portals — face surge demand. Call centers are overwhelmed. The operational challenge is maintaining service quality during the surge while simultaneously managing increased back-office processing demands.

Simultaneous Sector-Wide Stress

The most challenging aspect is the simultaneous nature of the stress. In a single-institution technology outage, other institutions absorb some of the displaced demand. In a systemic financial crisis, every institution faces elevated demand simultaneously. There is no spare capacity in the system. Technology infrastructure, human resources, and operational processes across the entire sector are stressed at the same time.

For DORA Art. 24 resilience testing, this means that testing scenarios should include simultaneous stress conditions: elevated transaction volumes, increased customer demand, intensified risk processing, and potential technology degradation — all occurring at the same time, as they do in a real financial crisis.

The Challenge

When Geopolitics Becomes Systemic Risk

On March 25, 2026, Fortune reported that Goldman Sachs had raised its probability of a US recession to 30% — up from 15% just weeks earlier — driven primarily by the economic impact of the Iran conflict on global oil prices, trade flows, and financial market stability. This was not just a macroeconomic forecast; it was a signal that the Iran conflict was creating systemic stress across the global financial system that would test every institution's operational resilience.

The oil price dimension was acute. The conflict in the Gulf region — home to approximately 25% of global oil production and transit — had caused oil prices to spike above $120 per barrel, with futures markets pricing in the possibility of further disruption. The economic shock from elevated energy prices cascaded through every sector of the economy: higher transportation costs, higher manufacturing costs, higher heating costs, and ultimately lower consumer spending. Financial institutions faced a combination of credit stress (borrowers struggling with higher costs), market volatility (equity and fixed-income markets experiencing rapid repricing), and operational stress (higher transaction volumes, increased customer inquiries, and strained technology infrastructure).

For DORA compliance, Goldman's recession probability increase illustrates a dimension of operational resilience that goes beyond technology: the ability to maintain critical services during a period of simultaneous financial stress, market volatility, and geopolitical uncertainty. DORA's framework focuses on ICT resilience, but the reality is that ICT systems face their greatest stress during financial crises — precisely when transaction volumes spike, customer demand increases, and operational errors have the most severe consequences.

The systemic nature of the stress was significant. Unlike a technology outage at a single institution, a geopolitically-driven financial crisis affects all institutions simultaneously. Every bank experiences increased credit monitoring demands, every trading desk faces elevated volatility, every customer service center handles surging inquiries. The resilience test is not whether a single institution can survive a specific failure, but whether the entire financial system can maintain operations during sustained, multi-dimensional stress.

The Approach

DORA Under Systemic Financial Stress

Goldman's 30% recession probability illustrates that DORA compliance must account for the interaction between financial stress and operational resilience — an interaction that the regulation acknowledges but that institutions often underestimate.

Art. 7 — Capacity Planning for Crisis Conditions

DORA Art. 7 requires ICT systems to have sufficient capacity. The March 2026 market volatility demonstrated that capacity planning must include crisis-state scenarios. This means dimensioning database infrastructure for 3-5x normal transaction volumes, ensuring message queue and API capacity can handle crisis-level throughput, provisioning network bandwidth for peak demand rather than average demand, and planning computational capacity for intensified risk calculations and credit monitoring.

Capacity planning that uses normal-state baselines will fail during a financial crisis. The margin between normal capacity and crisis-state demand must be explicitly quantified and maintained.

Art. 9 — Protection During Elevated Threat

Financial crises create elevated cybersecurity threats. Adversaries — whether nation-state actors or opportunistic criminals — target financial institutions during periods of market stress, knowing that security teams are stretched and that unusual transaction patterns (which might normally trigger alerts) are occurring legitimately. DORA Art. 9's protection and prevention requirements must be maintained even during financial crisis conditions when operational focus naturally shifts toward business continuity and customer service.

Art. 11 — Business Continuity Under Sustained Stress

DORA Art. 11 business continuity plans typically envision discrete events — a system failure, a vendor outage, a natural disaster — with a defined recovery trajectory. A geopolitically-driven financial crisis creates sustained stress without a clear end point. Business continuity planning must account for this sustained-stress scenario: maintaining elevated operational capacity for weeks or months, managing staff fatigue and rotation, and sustaining service quality during prolonged periods of above-normal demand.

Art. 24 — Stress Testing Integration

DORA Art. 24 resilience testing should integrate with financial stress testing. Most institutions conduct operational resilience testing and financial stress testing separately, managed by different teams with different methodologies. The March 2026 experience demonstrates that financial stress and operational stress occur simultaneously and interact: financial stress drives operational demand, and operational failures during financial stress have amplified consequences. Integrated stress testing — combining financial scenarios with operational resilience scenarios — would more realistically simulate the conditions institutions face during a crisis.

The Results

The Resilience Multiplier

Goldman's recession warning crystallizes a broader lesson for DORA implementation: operational resilience is most valuable when it is least available — during periods of systemic stress. An institution that maintains excellent operational resilience during normal conditions but degrades during a financial crisis has not achieved the objective that DORA was designed to ensure.

The Interaction Effect

Financial stress and operational stress interact in ways that amplify both. Financial stress drives transaction volume spikes that strain technology infrastructure. Technology degradation during financial stress prevents institutions from executing risk management operations (credit monitoring, collateral rebalancing, hedging). The inability to execute risk operations during a period of elevated risk creates a vicious cycle that can transform a financial stress event into an operational failure.

DORA's framework addresses operational resilience in isolation from financial resilience. But the March 2026 experience demonstrates that these are not independent dimensions — they interact, and the interaction amplifies risk. Effective operational resilience requires planning for the conditions that actually accompany financial crises: elevated volumes, intensified processing demands, customer service surges, and heightened cybersecurity threats — all occurring simultaneously and sustained over weeks or months.

Recommendations

Integrate operational and financial stress testing. DORA Art. 24 resilience testing should incorporate financial crisis scenarios (transaction volume spikes, credit monitoring intensification, customer service surges) as input conditions for operational resilience testing.

Capacity planning for crisis-state volumes. DORA Art. 7 capacity must be dimensioned for crisis-level demand (3-5x normal). Normal-state capacity that fails during a financial crisis is insufficient.

Sustained operations planning. Business continuity plans must account for sustained stress lasting weeks or months, including staff rotation, fatigue management, and the organizational sustainability of elevated operational postures.

Cybersecurity during financial stress. DORA Art. 9 protection measures must be maintained during financial crises when adversaries specifically target stressed institutions. Security budgets and staffing must not be sacrificed to fund crisis-response operations.

Lessons Learned

  1. 1DORA Art. 7 capacity planning must account for crisis-state volumes (3-5x normal) — ICT infrastructure dimensioned for normal operations will fail during a geopolitically-driven financial crisis when transaction volumes spike simultaneously across all institutions.
  2. 2DORA Art. 24 resilience testing should integrate with financial stress testing — financial stress drives operational demand, and operational failures during financial stress have amplified consequences that isolated testing does not capture.
  3. 3DORA Art. 11 business continuity must plan for sustained stress lasting weeks or months — geopolitical crises do not have clean start/end points, and organizational endurance (staff fatigue, resource depletion) becomes the binding constraint.
  4. 4DORA Art. 9 cybersecurity protection must be maintained during financial crises when adversaries specifically target stressed institutions — security budgets and staffing must not be sacrificed to fund crisis-response operations.
  5. 5Operational resilience and financial resilience interact and amplify each other — planning for one without the other produces an incomplete resilience framework that will fail during the real-world conditions that combine both.
recessionsystemic-riskoil-pricesgeopolitical-riskcapacity-planningstress-testingfinancial-crisispillar-ipillar-iipillar-iiimarket-volatility

Disclaimer:This case study is based on anonymized data from real-world DORA compliance programmes. Names, specific figures, and identifying details have been changed to protect confidentiality. The outcomes described are specific to the institution's context and may not be directly replicable.

Facing similar challenges?

See how Valendir can help your institution achieve and maintain DORA compliance with deterministic workflows, immutable evidence, and continuous assurance.