News, analysis, and guidance across GRC, risk, audit, and regulatory compliance.
Regulatory Obligations ManagementThe NIS2 Directive introduces a two-tier classification system that determines your compliance obligations. Your classification isn t arbitrary; it s driven by sector criticality, operational dependen
Regulatory Obligations ManagementThe Department of Justice released its updated Evaluation of Corporate Compliance Programs guidance on September 23, 2024, at the Society of Corporate Compliance and Ethics conference. This regulatory
Ethics & ConductAustralia s Criminal Code now holds your company liable if you can t prove you tried to prevent bribery. The Crimes Legislation Amendment (Combatting Foreign Bribery) Act 2024, effective September 202
Disclosure & Financial ReportingThe Challenge When the European Single Electronic Format (ESEF) regulation took effect for fiscal years starting January 1, 2020, around 5,300 companies faced a seemingly simple task: tag your IFRS co
Get weekly security insights and compliance updates delivered to your inbox.
Regulatory Obligations ManagementIf you can sell it in seconds, it s liquid, right? That logic works for municipal bonds and money market funds, but it fails for cryptocurrency. The Real Issue The problem isn t crypto s volatility. Y
Ethics & ConductUnderstanding the Real Challenge Many GRC teams at multinational organizations are grappling with what good looks like after implementing the EU Whistleblower Directive. While most Member States have
Regulatory Obligations ManagementYour compliance program passes every audit. Your policies document every obligation. Your team checks every regulatory box. Yet, when a new requirement lands, you re scrambling to retrofit processes t
Regulatory Obligations ManagementThe Securities and Exchange Commission settled charges in August 2026 against an AI startup and its former CEO for misrepresenting projected revenue. While the agency hasn t disclosed the company s na
Third-Party Risk ManagementThe Challenge In early May, a consumer lending company discovered that a third-party cloud platform storing customer data had been breached. The stolen records included names, Social Security numbers,
GRC Platforms & AutomationAs AI systems evolve from generating recommendations to executing actions within GRC workflows, your compliance team needs a practical framework to decide what to automate, what to monitor, and where
Regulatory Obligations ManagementWhy These Mistakes Keep Happening Compliance teams often see regulatory enforcement pauses as a chance to scale back their programs. This reaction isn t intentional; it s a natural response to shiftin
Regulatory Obligations ManagementYour compliance program probably treats policies like static documents. You draft them, get them approved, publish them to SharePoint, and move on. Maybe you review them annually if someone remembers
GRC Platforms & AutomationThe big red button worked when the risk was a server rack in Milwaukee. Now, when an AI agent can invoke APIs, update records, and execute transactions at machine speed, the off switch is scattered ac
Regulatory Obligations ManagementYou re evaluating compliance software for a regional bank with 47 branches. The vendor shows you a dashboard: 94% policy attestation, 312 monitoring reviews completed, 18 open issues. You ask which br
Regulatory Obligations ManagementIn March 2023, Deputy Attorney General Lisa Monaco announced significant updates to the Department of Justice s evaluation criteria for corporate compliance programs. These changes mark a fundamental
Regulatory Obligations ManagementThe conventional wisdom Compliance officers are rushing to build AI governance programs. The logic seems solid: the DOJ s September 2024 ECCP revisions highlight AI risks, the EU AI Act sets complianc
Third-Party Risk ManagementYour vendor risk team is constantly pitched AI features that promise to transform your third-party assessments or eliminate manual reviews entirely. While these claims sound impressive in demos, they
Third-Party Risk ManagementThe Wirecard fraud wasn t a sudden explosion. It was a slow-motion collapse of every control layer that should have stopped it. By the time investigators confirmed that €1.29 billion in escrow account
Ethics & ConductWhen the SEC Office of the Whistleblower reported receiving 24,980 tips in FY 2024, compliance teams were alarmed. It seemed employees were bypassing internal channels at unprecedented rates. Then cam
Enterprise Risk ManagementYou ve been handed the risk officer role after an unexpected departure, or your board just received an exam finding that your risk management lacks formalization. Either way, you re now responsible fo
