News, analysis, and guidance across GRC, risk, audit, and regulatory compliance.
Regulatory Obligations ManagementWhen the DOJ s corporate FCPA enforcement page shows just one action in 2026, you might be tempted to relax your anti-corruption controls. That s a mistake. Misreading enforcement trends as risk trend
Regulatory Obligations ManagementHealthcare organizations often repeat the same third-party risk management mistakes, even as regulators demand more robust vendor oversight. These aren t mere oversights; they re structural issues roo
Disclosure & Financial ReportingMost financial institutions treat regulatory reporting like a tax: necessary, expensive, and to be minimized. That mindset creates a self-fulfilling prophecy. You build reporting processes that barely
Third-Party Risk ManagementIf your company imports tin, tantalum, tungsten, or gold into the EU, you ve probably heard assumptions about what the EU Conflict Minerals Regulation requires. Some of these assumptions are incorrect
Get weekly security insights and compliance updates delivered to your inbox.
Regulatory Obligations ManagementThe Decision You re Facing Your organization screens third parties against sanctions lists . The question isn t whether to screen, it s how. Do you continue manual checks using publicly available list
Regulatory Obligations ManagementThe EU s Corporate Sustainability Due Diligence Directive (CSDDD) isn t a one-size-fits-all mandate. Your compliance path depends on three variables: where you operate, how much revenue you generate i
Business Continuity & ResilienceManchester Airports Group (MAG) managed to keep its airports operational during a ICT-Related Incident in August 2026, while attackers stole data on 8.7 million customers. Both outcomes are significan
Regulatory Obligations ManagementYou re not ignoring EU regulations. You ve assigned someone to track them, maybe even budgeted for a consultant. But if your organization treats CSRD , CSDDD , or the EU Retaliation Protection Directi
Ethics & ConductUnderstanding the Real Challenge Many GRC teams at multinational organizations are grappling with what good looks like after implementing the EU Whistleblower Directive. While most Member States have
GRC Platforms & AutomationThe big red button worked when the risk was a server rack in Milwaukee. Now, when an AI agent can invoke APIs, update records, and execute transactions at machine speed, the off switch is scattered ac
Disclosure & Financial ReportingThe Corporate ESG Reporting Directive (CSRD) expands ESG Reporting obligations to thousands of European companies starting in January 2024. If you re a GRC leader at an organization operating in or se
Policy Lifecycle ManagementYou re managing exceptions somewhere. Credit tracks loan-to-value departures in one spreadsheet. Information security maintains risk acceptances in another. Vendor management logs contractual deviatio
Privacy & Data ProtectionYour security team just deployed an AI-powered threat detection tool. Your legal department is experimenting with a contract analysis assistant. Your customer service team wants to use a chatbot train
Privacy & Data ProtectionSingapore s September deadline for DPO registration sent a clear signal: regulators expect you to prove compliance readiness on demand. The Personal Data Protection Commission s notification to compan
Regulatory Obligations ManagementWhen two managed investment schemes collapsed in Australia, the investigations revealed a familiar pattern: governance frameworks that seemed adequate on paper but failed in practice. The Australian T
Third-Party Risk ManagementThe European Supervisory Authorities (EBA, EIOPA, and ESMA) have issued a joint statement highlighting the cyber risks associated with frontier AI models. They urge financial entities to enhance gover
Regulatory Obligations ManagementSouth Africa s Draft National AI Policy, currently moving through Cabinet approval before the March 2026 public consultation, adopts a distributed approach to AI governance. Instead of establishing a
Regulatory Obligations ManagementThe European Commission s digital package promises a single-entry point for cybersecurity incident reporting across GDPR , NIS2 , DORA , and other regulations. On paper, this sounds like the administr
Regulatory Obligations ManagementThe Conventional Wisdom The SEC s 2026 regulatory agenda suggests relief. With 38 items focused on deregulation, compliance teams are anticipating a lighter workload. Proposed amendments to rule 206(4
Regulatory Obligations ManagementIf your firm operates investment services across EU member states, you re now subject to a supervisory model that s fundamentally different from what existed three years ago. National competent author
