News, analysis, and guidance across GRC, risk, audit, and regulatory compliance.
Regulatory Obligations ManagementWhen your marketing team sends you a draft campaign featuring a climate-friendly product claim, your first question shouldn t be whether it s aspirational. It should be whether you can defend it in co
Regulatory Obligations ManagementThe SEC s Division of Enforcement, led by David Woodcock, is prioritizing aggressive fraud enforcement. For compliance officers, this isn t just a policy shift, it s a call to scrutinize your fraud de
Third-Party Risk ManagementThe question at hand The PRA and FCA have introduced new third-party risk management rules, effective by March 2027, sparking a debate: how much of your TPRM program should rely on automation versus h
Internal Controls & AuditThe SEC s Division of Examinations has issued a warning to investment advisers: your annual compliance reviews aren t up to par. The division s latest risk alert highlights six specific failures acros
Get weekly security insights and compliance updates delivered to your inbox.
Regulatory Obligations ManagementThese questions come from compliance officers, GRC directors, and legal teams who ve been closely monitoring constitutional challenges to the False Claims Act s qui tam provisions in federal courts. T
Disclosure & Financial ReportingWhen a regulatory framework update comes with a 28-month implementation window, it s not a typical incident. But for compliance officers managing disclosure programs under the Prospectus Regulation ,
Regulatory Obligations ManagementThe Silence Speaks Volumes Eight months ago, the Trump Administration announced the creation of a National Fraud Enforcement Division. Since then, compliance officers have been left without clear guid
Regulatory Obligations ManagementThe real question isn t whether your code of conduct needs attention. It s whether you should make incremental updates or opt for a complete rewrite. This decision impacts your timeline, budget, stake
Regulatory Obligations ManagementThe idea that AI will transform compliance officers from reactive gatekeepers into strategic partners is widespread. Automate routine tasks, free up time, and suddenly you re shaping decisions instead
Privacy & Data ProtectionAs California ramps up enforcement and companies rush to meet CCPA obligations, a familiar organizational fault line emerges: who owns the privacy notice on your website? Compliance teams understand l
Third-Party Risk ManagementFinCEN s August 2020 guidance on politically exposed persons (PEPs) confirms what compliance officers already know: there s no checklist. You re expected to design a risk-based due diligence framework
Regulatory Obligations ManagementYou ve probably noticed your external auditors asking different questions lately. They re spending more time on your whistleblower hotline metrics. They want to know how many employees completed ethic
Privacy & Data ProtectionThe California Individual Rights Act (CPRA) took effect on January 1, 2023, with enforcement starting July 1, 2023. Unlike the California Consumer Privacy Act (CCPA) it replaced, the CPRA expands cons
Third-Party Risk ManagementSanctions compliance has become a boardroom priority, yet many third-party risk programs still operate on outdated assumptions. These assumptions were formed before the Russian Federation s invasion o
Regulatory Obligations ManagementGermany s Supply Chain Due Diligence Act is now in full effect. The Federal Office of Economic Affairs and Export Control (BAFA) can impose fines up to eight million euros or 2% of annual global turno
Privacy & Data ProtectionThe U.K. has updated its data protection rules with a new law aimed at simplifying compliance with existing privacy legislation, including GDPR . For compliance officers managing data processing regis
Regulatory Obligations ManagementThe Justice Department s Criminal Division released updated compliance program guidance this week, focusing on practical questions that impact cooperation credit negotiations, declination decisions, a
Regulatory Obligations ManagementThe U.S. Department of Health and Human Services Office of the Inspector General (OIG) has made a clear statement: compliance officers shouldn t report to legal or finance. They should report directly
Ethics & ConductRethinking Noncompetes Your compliance team might view noncompete agreements as critical for safeguarding intellectual property. The reasoning seems straightforward: you ve invested in training employ
Regulatory Obligations ManagementThe Question at Hand When the Supreme Court makes significant regulatory changes, compliance officers face a dilemma: should you adjust your program in response, or continue with your current obligati
