News, analysis, and guidance across GRC, risk, audit, and regulatory compliance.
Third-Party Risk ManagementRapidly emerging vulnerabilities demand proactive third-party risk management. Avoid common TPRM mistakes that turn a week of exploits into a crisis.
Third-Party Risk ManagementNine exploited vulnerabilities surfaced in five days, emphasizing the critical need to select a CVE monitoring model that fits your vendor portfolio and compliance needs.
Ethics & ConductThe FCA reports widespread gaps in conflict identification and control updates in private markets, urging firms to prove fair investor treatment.
Regulatory Obligations ManagementBank of America's static risk scoring caused a $1.2 billion penalty by missing suspicious activity alerts, highlighting the need for adaptive monitoring.
Get weekly security insights and compliance updates delivered to your inbox.
Third-Party Risk ManagementThird-party financial crime risk is evolving rapidly. The UK s Failure to Prevent Fraud offense is now in effect. Cryptocurrency exchanges are under tighter sanctions scrutiny. Geopolitical upheavals
Regulatory Obligations ManagementScope This guide examines the SEC Division of Examinations September 14, 2026 Risk Alert on registered investment adviser annual compliance reviews. It s designed for compliance officers, CCOs, and op
Regulatory Obligations ManagementESMA s proposed MiCA revisions demand immediate attention from third-party risk managers. If your organization engages with crypto-asset service providers, you need a structured way to evaluate whethe
Third-Party Risk ManagementScope This guide shows you how to build a third-party risk management program that satisfies SS2/21, PS26/2, DORA, and the EBA Guidelines on ICT and security risk management. It s tailored for financi
GRC Platforms & AutomationWhen the OCC, FDIC, and Federal Reserve revised their model risk guidance on April 17, 2026, they excluded generative and agentic AI from its scope. This shift places the responsibility on your team t
Third-Party Risk ManagementThird-party risk teams are testing AI tools right now. Some are seeing real time savings. Others find their AI-powered platform can t answer basic questions about vendor documentation. The issue isn t
Third-Party Risk ManagementMost third-party risk programs can tell you everything about a supplier: its SOC 2 status, financial health, geographic footprint, and cybersecurity posture. But ask what happens when that supplier go
Third-Party Risk ManagementYour vendor questionnaire hasn t changed since 2019, but vendors are now deploying advanced AI models that could alter the speed and economics of cyber risk faster than your defenses can adapt. Financ
Regulatory Obligations ManagementGermany s Law to Strengthen Business Integrity introduces criminal liability for companies and allows sanctions up to 10% of worldwide annual revenue for organizations exceeding EUR 100 million in tur
Third-Party Risk ManagementIf you re aiming to comply with the EU Corporate Sustainability Due Diligence Directive (CSDD), you might think rigorous supplier audits are the solution. Conduct site visits, review policies, and che
Third-Party Risk ManagementWhen your Third-Party Risk Management (TPRM) program treats every vendor the same, you re either over-investing in low-risk relationships or under-managing critical ones. You need a structured way to
Third-Party Risk ManagementThe Securities and Exchange Commission (SEC) is sending letters to technology companies, probing their relationships with distributors, resellers, and other third parties in high-risk corruption areas
Third-Party Risk ManagementWhen Deputy Attorney General Lisa Monaco referred to sanctions enforcement as the new FCPA in summer 2022, it marked a significant shift in the DOJ s focus on economic crime. Yet, many third-party ris
Third-Party Risk ManagementThe Corporate Sustainability Due Diligence Directive (CSDDD) was formally approved by the European Council on May 24. It s a unique regulation that goes beyond typical supply chain concerns like cyber
Third-Party Risk ManagementThe Challenge In early May, a consumer lending company discovered that a third-party cloud platform storing customer data had been breached. The stolen records included names, Social Security numbers,
Third-Party Risk ManagementYour vendor risk team is constantly pitched AI features that promise to transform your third-party assessments or eliminate manual reviews entirely. While these claims sound impressive in demos, they
