News, analysis, and guidance across GRC, risk, audit, and regulatory compliance.
Privacy & Data ProtectionSingapore s September deadline for DPO registration sent a clear signal: regulators expect you to prove compliance readiness on demand. The Personal Data Protection Commission s notification to compan
Regulatory Obligations ManagementWhen two managed investment schemes collapsed in Australia, the investigations revealed a familiar pattern: governance frameworks that seemed adequate on paper but failed in practice. The Australian T
Third-Party Risk ManagementThe European Supervisory Authorities (EBA, EIOPA, and ESMA) have issued a joint statement highlighting the cyber risks associated with frontier AI models. They urge financial entities to enhance gover
Regulatory Obligations ManagementSouth Africa s Draft National AI Policy, currently moving through Cabinet approval before the March 2026 public consultation, adopts a distributed approach to AI governance. Instead of establishing a
Get weekly security insights and compliance updates delivered to your inbox.
Regulatory Obligations ManagementThe European Commission s digital package promises a single-entry point for cybersecurity incident reporting across GDPR , NIS2 , DORA , and other regulations. On paper, this sounds like the administr
Regulatory Obligations ManagementThe Conventional Wisdom The SEC s 2026 regulatory agenda suggests relief. With 38 items focused on deregulation, compliance teams are anticipating a lighter workload. Proposed amendments to rule 206(4
Regulatory Obligations ManagementIf your firm operates investment services across EU member states, you re now subject to a supervisory model that s fundamentally different from what existed three years ago. National competent author
Privacy & Data ProtectionThe EU Data Act takes effect in September 2025. If you re running connected products or cloud services with EU users, you re in scope, regardless of where you re headquartered. This isn t just another
Regulatory Obligations ManagementThe Federal Court s decision in ASIC v FIIG Securities Limited has prompted many GRC leaders to reassess their risk management systems. The AUD 2.5 million penalty against FIIG is more than a headline
