News, analysis, and guidance across GRC, risk, audit, and regulatory compliance.
GRC Platforms & AutomationAs AI systems evolve from generating recommendations to executing actions within GRC workflows, your compliance team needs a practical framework to decide what to automate, what to monitor, and where
Regulatory Obligations ManagementWhy These Mistakes Keep Happening Compliance teams often see regulatory enforcement pauses as a chance to scale back their programs. This reaction isn t intentional; it s a natural response to shiftin
Regulatory Obligations ManagementYour compliance program probably treats policies like static documents. You draft them, get them approved, publish them to SharePoint, and move on. Maybe you review them annually if someone remembers
Regulatory Obligations ManagementThe conventional wisdom Compliance officers are rushing to build AI governance programs. The logic seems solid: the DOJ s September 2024 ECCP revisions highlight AI risks, the EU AI Act sets complianc
Get weekly security insights and compliance updates delivered to your inbox.
Third-Party Risk ManagementThe Wirecard fraud wasn t a sudden explosion. It was a slow-motion collapse of every control layer that should have stopped it. By the time investigators confirmed that €1.29 billion in escrow account
Ethics & ConductWhen the SEC Office of the Whistleblower reported receiving 24,980 tips in FY 2024, compliance teams were alarmed. It seemed employees were bypassing internal channels at unprecedented rates. Then cam
Regulatory Obligations ManagementOn February 2, 2025, the first five articles of the EU AI Act took effect. If your organization operates in Europe or deploys AI systems used by European entities, you re now subject to enforcement. A
Regulatory Obligations ManagementThe Securities and Exchange Commission charged 38 firms with filing false information in their Forms ADV, all following an identical playbook: claim the same auditor, report nearly identical asset val
Regulatory Obligations ManagementThe AI Action Plan s focus on self-regulation shifts compliance responsibility directly to your organization. You can t wait for federal regulations to dictate what s acceptable; you need to build you
Ethics & ConductThe Conventional Wisdom You re hearing that the DOJ s expanded whistleblower rewards programs, announced May 12, 2025, for the Criminal Division and July 8, 2025, for the Antitrust Division, are a gam
Disclosure & Financial ReportingNo public company has collapsed from Sarbanes-Oxley Act compliance in the last decade, but many have faced significant setbacks due to failures in this area. These failures often lead to restatements,
Ethics & ConductContext: Questions from the compliance team channel Since the DOJ s June 9 policy memo redefining FCPA enforcement priorities, many compliance officers have asked whether the old playbook still applie
Regulatory Obligations ManagementThe Question at Hand When New York s LLC Transparency Act took effect on January 1, 2026, it came with a significant limitation: it applies only to non-US LLCs authorized to do business in the state.
Regulatory Obligations ManagementScope of the Guide This guide covers the Financial Services and Markets Act 2000 (Cryptoassets) Regulations 2026, establishing the UK s first comprehensive regulatory framework for digital assets. If
Regulatory Obligations ManagementWhen the Securities Commission Malaysia clarified digital asset broking requirements on January 30, 2026, compliance officers at Capital Markets Services Licence holders faced a familiar problem: regu
Regulatory Obligations ManagementThe SEC and CFTC s proposal to amend Form PF filing requirements marks a major shift in private fund reporting since Dodd-Frank mandated these disclosures in 2010. If finalized, these changes will rem
Privacy & Data ProtectionQuestions about GDPR compliance frequently arise in compliance channels, vendor discussions, and audit preparations. Even six years after GDPR s implementation, teams still grapple with key issues: wh
Regulatory Obligations ManagementThe European Securities and Markets Authority (ESMA) recently highlighted €1 billion in potential annual savings through simplified transaction reporting, sparking renewed interest in reporting reform
Regulatory Obligations ManagementThe Challenge When the EU Anticorruption Directive arrived with penalties reaching 5% of global revenue or €40 million for serious offenses, compliance teams faced a familiar problem: integrating new
Regulatory Obligations ManagementWhat Changed in 2025 Regulators issued nearly 4,000 new designations across 265 list updates in 2025. While this is down from 5,674 additions in 2022, the drop in volume hides a bigger shift: sanction
