News, analysis, and guidance across GRC, risk, audit, and regulatory compliance.
Third-Party Risk ManagementThe EU s Corporate Sustainability Due Diligence Directive (CSDDD) hasn t seen its first enforcement case yet, with compliance deadlines set for 2027. However, you can anticipate potential failure mode
Ethics & ConductRethinking Noncompetes Your compliance team might view noncompete agreements as critical for safeguarding intellectual property. The reasoning seems straightforward: you ve invested in training employ
Third-Party Risk ManagementThe Securities and Exchange Commission (SEC) is sending letters to technology companies, probing their relationships with distributors, resellers, and other third parties in high-risk corruption areas
Third-Party Risk ManagementWhen Deputy Attorney General Lisa Monaco referred to sanctions enforcement as the new FCPA in summer 2022, it marked a significant shift in the DOJ s focus on economic crime. Yet, many third-party ris
Get weekly security insights and compliance updates delivered to your inbox.
Third-Party Risk ManagementThe Corporate Sustainability Due Diligence Directive (CSDDD) was formally approved by the European Council on May 24. It s a unique regulation that goes beyond typical supply chain concerns like cyber
Regulatory Obligations ManagementThe Question at Hand When the Supreme Court makes significant regulatory changes, compliance officers face a dilemma: should you adjust your program in response, or continue with your current obligati
Regulatory Obligations ManagementYou re not ignoring EU regulations. You ve assigned someone to track them, maybe even budgeted for a consultant. But if your organization treats CSRD , CSDDD , or the EU Retaliation Protection Directi
Regulatory Obligations ManagementThe NIS2 Directive introduces a two-tier classification system that determines your compliance obligations. Your classification isn t arbitrary; it s driven by sector criticality, operational dependen
Regulatory Obligations ManagementThe Department of Justice released its updated Evaluation of Corporate Compliance Programs guidance on September 23, 2024, at the Society of Corporate Compliance and Ethics conference. This regulatory
Ethics & ConductAustralia s Criminal Code now holds your company liable if you can t prove you tried to prevent bribery. The Crimes Legislation Amendment (Combatting Foreign Bribery) Act 2024, effective September 202
Disclosure & Financial ReportingThe Challenge When the European Single Electronic Format (ESEF) regulation took effect for fiscal years starting January 1, 2020, around 5,300 companies faced a seemingly simple task: tag your IFRS co
Regulatory Obligations ManagementIf you can sell it in seconds, it s liquid, right? That logic works for municipal bonds and money market funds, but it fails for cryptocurrency. The Real Issue The problem isn t crypto s volatility. Y
Ethics & ConductUnderstanding the Real Challenge Many GRC teams at multinational organizations are grappling with what good looks like after implementing the EU Whistleblower Directive. While most Member States have
Regulatory Obligations ManagementYour compliance program passes every audit. Your policies document every obligation. Your team checks every regulatory box. Yet, when a new requirement lands, you re scrambling to retrofit processes t
Regulatory Obligations ManagementThe Securities and Exchange Commission settled charges in August 2026 against an AI startup and its former CEO for misrepresenting projected revenue. While the agency hasn t disclosed the company s na
Third-Party Risk ManagementThe Challenge In early May, a consumer lending company discovered that a third-party cloud platform storing customer data had been breached. The stolen records included names, Social Security numbers,
GRC Platforms & AutomationAs AI systems evolve from generating recommendations to executing actions within GRC workflows, your compliance team needs a practical framework to decide what to automate, what to monitor, and where
Regulatory Obligations ManagementWhy These Mistakes Keep Happening Compliance teams often see regulatory enforcement pauses as a chance to scale back their programs. This reaction isn t intentional; it s a natural response to shiftin
Regulatory Obligations ManagementYour compliance program probably treats policies like static documents. You draft them, get them approved, publish them to SharePoint, and move on. Maybe you review them annually if someone remembers
GRC Platforms & AutomationThe big red button worked when the risk was a server rack in Milwaukee. Now, when an AI agent can invoke APIs, update records, and execute transactions at machine speed, the off switch is scattered ac
