News, analysis, and guidance across GRC, risk, audit, and regulatory compliance.
Regulatory Obligations ManagementESMA's 2025 sanctions report reveals stable sanction volumes but uneven enforcement across EEA jurisdictions, urging GRC teams to prioritize harmonized compliance.
Regulatory Obligations ManagementThe rollback of 205 corporate enforcement cases under political influence highlights the importance of designing compliance programs that remain independent and resilient.
Regulatory Obligations ManagementThe HKMA's ART framework mandates banks to adopt robust AI governance covering accountability, risk management, and transparency to meet evolving regulatory expectations.
Regulatory Obligations ManagementExplore three AML governance models inspired by the UK's multi-agency coordination to tackle economic crime effectively in your jurisdiction.
Get weekly security insights and compliance updates delivered to your inbox.
Regulatory Obligations ManagementIn September 2026, the FDIC and DOJ issued five enforcement actions highlighting governance failures at the board and executive level. A former bank CEO received a 112-month prison sentence for inside
Third-Party Risk ManagementThe European Banking Authority (EBA) released guidelines in 2024 that reveal a critical gap in how financial institutions manage third-party relationships. These guidelines cover the full lifecycle of
Third-Party Risk ManagementThe European Supervisory Authorities Autumn 2026 risk update has exposed vulnerabilities that many GRC leaders thought they d already addressed. The findings reveal a gap between what financial instit
Regulatory Obligations ManagementWhen the DOJ s corporate FCPA enforcement page shows just one action in 2026, you might be tempted to relax your anti-corruption controls. That s a mistake. Misreading enforcement trends as risk trend
Regulatory Obligations ManagementHealthcare organizations often repeat the same third-party risk management mistakes, even as regulators demand more robust vendor oversight. These aren t mere oversights; they re structural issues roo
Disclosure & Financial ReportingMost financial institutions treat regulatory reporting like a tax: necessary, expensive, and to be minimized. That mindset creates a self-fulfilling prophecy. You build reporting processes that barely
Third-Party Risk ManagementIf your company imports tin, tantalum, tungsten, or gold into the EU, you ve probably heard assumptions about what the EU Conflict Minerals Regulation requires. Some of these assumptions are incorrect
Regulatory Obligations ManagementThe Decision You re Facing Your organization screens third parties against sanctions lists . The question isn t whether to screen, it s how. Do you continue manual checks using publicly available list
Regulatory Obligations ManagementThe EU s Corporate Sustainability Due Diligence Directive (CSDDD) isn t a one-size-fits-all mandate. Your compliance path depends on three variables: where you operate, how much revenue you generate i
Business Continuity & ResilienceManchester Airports Group (MAG) managed to keep its airports operational during a ICT-Related Incident in August 2026, while attackers stole data on 8.7 million customers. Both outcomes are significan
Regulatory Obligations ManagementYou re not ignoring EU regulations. You ve assigned someone to track them, maybe even budgeted for a consultant. But if your organization treats CSRD , CSDDD , or the EU Retaliation Protection Directi
Ethics & ConductUnderstanding the Real Challenge Many GRC teams at multinational organizations are grappling with what good looks like after implementing the EU Whistleblower Directive. While most Member States have
GRC Platforms & AutomationThe big red button worked when the risk was a server rack in Milwaukee. Now, when an AI agent can invoke APIs, update records, and execute transactions at machine speed, the off switch is scattered ac
Disclosure & Financial ReportingThe Corporate ESG Reporting Directive (CSRD) expands ESG Reporting obligations to thousands of European companies starting in January 2024. If you re a GRC leader at an organization operating in or se
Policy Lifecycle ManagementYou re managing exceptions somewhere. Credit tracks loan-to-value departures in one spreadsheet. Information security maintains risk acceptances in another. Vendor management logs contractual deviatio
Privacy & Data ProtectionYour security team just deployed an AI-powered threat detection tool. Your legal department is experimenting with a contract analysis assistant. Your customer service team wants to use a chatbot train
