News, analysis, and guidance across GRC, risk, audit, and regulatory compliance.
Third-Party Risk ManagementThe Corporate Sustainability Due Diligence Directive (CSDDD) was formally approved by the European Council on May 24. It s a unique regulation that goes beyond typical supply chain concerns like cyber
Third-Party Risk ManagementThe Challenge In early May, a consumer lending company discovered that a third-party cloud platform storing customer data had been breached. The stolen records included names, Social Security numbers,
Third-Party Risk ManagementYour vendor risk team is constantly pitched AI features that promise to transform your third-party assessments or eliminate manual reviews entirely. While these claims sound impressive in demos, they
Third-Party Risk ManagementThe Wirecard fraud wasn t a sudden explosion. It was a slow-motion collapse of every control layer that should have stopped it. By the time investigators confirmed that €1.29 billion in escrow account
Get weekly security insights and compliance updates delivered to your inbox.
Third-Party Risk ManagementYour board just asked if your company is ready for the EU s Corporate Sustainability Due Diligence Directive (CSDDD). If you re a CISO or GRC leader, this is now your responsibility. Scope of This Gui
Third-Party Risk ManagementThe Court of Justice of the European Union (CJEU) has issued rulings that fundamentally change how your team must evaluate trust structures in the context of EU sanctions and anti-money laundering (AM
Third-Party Risk ManagementThe European Supervisory Authorities (EBA, EIOPA, and ESMA) have issued a joint statement highlighting the cyber risks associated with frontier AI models. They urge financial entities to enhance gover
Third-Party Risk ManagementThe Conduent breach exposed sensitive information of about 25 million individuals and cost the vendor roughly $25 million in response expenses. More importantly for your program, every organization re
Third-Party Risk ManagementWhat Happened In 2023, 61% of organizations reported breaches involving third-party vendors. This isn t an isolated incident; it s a pattern showing systemic failures in assessing and monitoring vendo
Third-Party Risk ManagementWhen Klue s OAuth integration was compromised in June 2026, attackers used a dormant credential to harvest tokens and access data from connected Salesforce environments. The breach didn t just affect
