News, analysis, and guidance across GRC, risk, audit, and regulatory compliance.
Enterprise Risk ManagementYou ve been handed the risk officer role after an unexpected departure, or your board just received an exam finding that your risk management lacks formalization. Either way, you re now responsible fo
Privacy & Data ProtectionYou re processing data for customers or employees in Switzerland. Your legal team asks whether you need to comply with the revised Swiss Federal Act on Data Protection (revFADP). Your GDPR program is
Regulatory Obligations ManagementRegulatory Changes and Their Impact On December 16, the EU Parliament approved amendments to the Corporate ESG Reporting Directive (CSRD) and the Corporate Sustainability Due Diligence Directive (CSDD
Regulatory Obligations ManagementThe Conventional Wisdom Your compliance team managing OTC derivatives might be celebrating the European Supervisory Authorities proposed amendments to bilateral margin requirements. The logic seems st
Get weekly security insights and compliance updates delivered to your inbox.
Third-Party Risk ManagementThe Conduent breach exposed sensitive information of about 25 million individuals and cost the vendor roughly $25 million in response expenses. More importantly for your program, every organization re
Privacy & Data ProtectionThe EU AI Act s Fundamental Rights Impact Assessment (FRIA) requirement goes live in three months. If your team is deploying high-risk AI systems as a public body or regulated private entity, Article
Third-Party Risk ManagementWhat Happened In 2023, 61% of organizations reported breaches involving third-party vendors. This isn t an isolated incident; it s a pattern showing systemic failures in assessing and monitoring vendo
Third-Party Risk ManagementWhen Klue s OAuth integration was compromised in June 2026, attackers used a dormant credential to harvest tokens and access data from connected Salesforce environments. The breach didn t just affect
Regulatory Obligations ManagementThe Joint Board of Appeal recently dismissed an appeal against the European Banking Authority (EBA), ruling that the EBA s decision not to investigate a complaint about a Finnish authority s handling
