News, analysis, and guidance across GRC, risk, audit, and regulatory compliance.
Regulatory Obligations ManagementThe question isn t academic anymore. Between now and March 2026, the Central Bank of Nigeria , Bank of Ghana , and South African Prudential Authority have all issued directives making board-level risk
Privacy & Data ProtectionThe EU AI Act s Fundamental Rights Impact Assessment (FRIA) requirement goes live in three months. If your team is deploying high-risk AI systems as a public body or regulated private entity, Article
Enterprise Risk ManagementRegulatory Shift and Its Implications Between 2025 and early 2026, U.S. financial regulators, including the FDIC , Federal Reserve, NCUA , and OCC, moved towards more industry-friendly oversight. They
Regulatory Obligations ManagementThe Challenge When the EU Anticorruption Directive arrived with penalties reaching 5% of global revenue or €40 million for serious offenses, compliance teams faced a familiar problem: integrating new
Get weekly security insights and compliance updates delivered to your inbox.
Regulatory Obligations ManagementYou ve built an AI governance process. Europe has a framework. The U.S. team has a different one. Product teams route requests through both. Six months later, no one can tell you which business units
Regulatory Obligations ManagementWhat Changed in 2025 Regulators issued nearly 4,000 new designations across 265 list updates in 2025. While this is down from 5,674 additions in 2022, the drop in volume hides a bigger shift: sanction
Regulatory Obligations ManagementIf you re managing DORA , the EU AI Act , and NIS2 with spreadsheets and shared inboxes, you re not running a compliance program . You re running a failure audit in slow motion. The connective infrast
Regulatory Obligations ManagementThe revised interagency model risk guidance issued on April 17, 2026, by the FDIC, OCC, and Federal Reserve presents a critical decision for banking compliance teams: should you govern all models with
Ethics & ConductThe Securities and Exchange Commission s settlement with Benjamin Tesfaye highlights the consequences when confidentiality controls fail. Tesfaye agreed to pay $20,836 in disgorgement and interest, pl
Regulatory Obligations ManagementThe Corporate Transparency Act s beneficial ownership reporting requirements have been rolled back for U.S. entities. FinCEN s final rule exempts U.S. companies and individuals from these requirements
Regulatory Obligations ManagementThe Conventional Wisdom The SEC s 2026 regulatory agenda suggests relief. With 38 items focused on deregulation, compliance teams are anticipating a lighter workload. Proposed amendments to rule 206(4
Regulatory Obligations ManagementThese questions come from compliance teams preparing for APRA CPS 230 implementation. They re the practical questions that arise in planning meetings after you ve read the standard multiple times and
Regulatory Obligations ManagementThe authorization of EuroCTP B.V. as the Consolidated Tape Provider for EU shares and ETFs presents a critical decision point for financial institutions. How will you access and operationalize this da
Regulatory Obligations ManagementThe OCC s June 2026 consent order against a newly converted national bank highlights a critical lesson in BSA/AML remediation: changing your charter won t fix structural deficiencies. The bank, which
Regulatory Obligations ManagementThe European Securities and Markets Authority (ESMA) has set 11 October 2027 as the transition date for T+1 settlement in EU financial markets. The first regulatory deadline is 7 December 2026 for all
Third-Party Risk ManagementWhat Happened In 2023, 61% of organizations reported breaches involving third-party vendors. This isn t an isolated incident; it s a pattern showing systemic failures in assessing and monitoring vendo
Regulatory Obligations ManagementThe Justice Department s new National Fraud Enforcement Division changes more than just who prosecutes fraud; it shifts what your compliance team needs to worry about and when. Assistant Attorney Gene
Third-Party Risk ManagementWhen Klue s OAuth integration was compromised in June 2026, attackers used a dormant credential to harvest tokens and access data from connected Salesforce environments. The breach didn t just affect
Regulatory Obligations ManagementIf your firm operates investment services across EU member states, you re now subject to a supervisory model that s fundamentally different from what existed three years ago. National competent author
Regulatory Obligations ManagementThe Joint Board of Appeal recently dismissed an appeal against the European Banking Authority (EBA), ruling that the EBA s decision not to investigate a complaint about a Finnish authority s handling
