News, analysis, and guidance across GRC, risk, audit, and regulatory compliance.
Disclosure & Financial ReportingMost financial institutions treat regulatory reporting like a tax: necessary, expensive, and to be minimized. That mindset creates a self-fulfilling prophecy. You build reporting processes that barely
Third-Party Risk ManagementMost third-party risk programs can tell you everything about a supplier: its SOC 2 status, financial health, geographic footprint, and cybersecurity posture. But ask what happens when that supplier go
Regulatory Obligations ManagementThe Silence Speaks Volumes Eight months ago, the Trump Administration announced the creation of a National Fraud Enforcement Division. Since then, compliance officers have been left without clear guid
Regulatory Obligations ManagementThe Problem: Why This Matters Now You ve filed a Suspicious Activity Report (SAR). Your customer calls asking why their wire transfer was delayed. Until now, most compliance teams defaulted to silence
Get weekly security insights and compliance updates delivered to your inbox.
Regulatory Obligations ManagementThe real question isn t whether your code of conduct needs attention. It s whether you should make incremental updates or opt for a complete rewrite. This decision impacts your timeline, budget, stake
Third-Party Risk ManagementYour vendor questionnaire hasn t changed since 2019, but vendors are now deploying advanced AI models that could alter the speed and economics of cyber risk faster than your defenses can adapt. Financ
Regulatory Obligations ManagementThe idea that AI will transform compliance officers from reactive gatekeepers into strategic partners is widespread. Automate routine tasks, free up time, and suddenly you re shaping decisions instead
Disclosure & Financial ReportingWhat Happened On March 21, 2022, the SEC advanced proposed rule amendments requiring public companies to disclose climate-related information in their financial filings. The proposal passed 3-1 and en
Disclosure & Financial ReportingYour finance team just identified a material error in last quarter s earnings. The CFO is asking whether you need to invoke your clawback policy. The controller is wondering if this affects her bonus.
Enterprise Risk ManagementScope - What This Guide Covers This guide outlines the operational and governance changes necessary when transitioning from a Chief Compliance Officer to a Chief Risk Officer, or when establishing a c
Privacy & Data ProtectionYou ve categorized your data, drafted your privacy notice, and set up a toll-free number for data subject requests. But if an auditor or regulator asked you to prove your CCPA compliance tomorrow, cou
Privacy & Data ProtectionAs California ramps up enforcement and companies rush to meet CCPA obligations, a familiar organizational fault line emerges: who owns the privacy notice on your website? Compliance teams understand l
Third-Party Risk ManagementFinCEN s August 2020 guidance on politically exposed persons (PEPs) confirms what compliance officers already know: there s no checklist. You re expected to design a risk-based due diligence framework
Regulatory Obligations ManagementGermany s Law to Strengthen Business Integrity introduces criminal liability for companies and allows sanctions up to 10% of worldwide annual revenue for organizations exceeding EUR 100 million in tur
Third-Party Risk ManagementIf your company imports tin, tantalum, tungsten, or gold into the EU, you ve probably heard assumptions about what the EU Conflict Minerals Regulation requires. Some of these assumptions are incorrect
Internal Controls & AuditThe Challenge In spring 2021, compliance and legal teams at numerous companies received anonymous reports alleging serious financial misconduct, including accounting fraud and kickbacks. These reports
Regulatory Obligations ManagementThe Decision You re Facing Your organization screens third parties against sanctions lists . The question isn t whether to screen, it s how. Do you continue manual checks using publicly available list
Regulatory Obligations ManagementYou ve probably noticed your external auditors asking different questions lately. They re spending more time on your whistleblower hotline metrics. They want to know how many employees completed ethic
Ethics & ConductJapan s Retaliation Protection Act expanded to include small and medium-sized businesses on June 1, 2022. This wasn t a new law; it extended existing requirements for large organizations. Compliance t
Privacy & Data ProtectionThe California Individual Rights Act (CPRA) took effect on January 1, 2023, with enforcement starting July 1, 2023. Unlike the California Consumer Privacy Act (CCPA) it replaced, the CPRA expands cons
