News, analysis, and guidance across GRC, risk, audit, and regulatory compliance.
Disclosure & Financial ReportingNo public company has collapsed from Sarbanes-Oxley Act compliance in the last decade, but many have faced significant setbacks due to failures in this area. These failures often lead to restatements,
Enterprise Risk ManagementThe FDIC s proposal to raise Part 363 thresholds for the first time in 33 years has sparked relief among mid-sized banks. Fewer mandated audits and reduced audit committee requirements sound appealing
Privacy & Data ProtectionYour privacy compliance program needs to address 19 state laws and counting. If you re still managing regulatory tracking in spreadsheets and static documents, you re falling behind. This template pro
Privacy & Data ProtectionSingapore s September deadline for DPO registration sent a clear signal: regulators expect you to prove compliance readiness on demand. The Personal Data Protection Commission s notification to compan
Get weekly security insights and compliance updates delivered to your inbox.
Regulatory Obligations ManagementIf your team clears derivatives through non-EU central counterparties, you ll soon need to formalize your reporting process. ESMA s new framework requires structured annual submissions starting after
Regulatory Obligations ManagementThe 3 September 2026 deadline for ESMA s weekly commodity derivatives position reporting framework demands a technical decision you can t defer. Your organization must submit reports using XML schema
Ethics & ConductContext: Questions from the compliance team channel Since the DOJ s June 9 policy memo redefining FCPA enforcement priorities, many compliance officers have asked whether the old playbook still applie
Regulatory Obligations ManagementRegulatory Changes and Their Impact On December 16, the EU Parliament approved amendments to the Corporate ESG Reporting Directive (CSRD) and the Corporate Sustainability Due Diligence Directive (CSDD
Regulatory Obligations ManagementThe Question at Hand When New York s LLC Transparency Act took effect on January 1, 2026, it came with a significant limitation: it applies only to non-US LLCs authorized to do business in the state.
Privacy & Data ProtectionThe Spanish Data Protection Authority s January 2026 notice and the European Commission s draft Code of Practice on AI transparency mark a regulatory shift. If your organization views these as distant
Regulatory Obligations ManagementScope of the Guide This guide covers the Financial Services and Markets Act 2000 (Cryptoassets) Regulations 2026, establishing the UK s first comprehensive regulatory framework for digital assets. If
Regulatory Obligations ManagementWhy This Matters Now If your team manages compliance for a multinational with operations in South Korea, you re familiar with the document-heavy nature of Korean tax audits. Previously, legal communic
Regulatory Obligations ManagementWhen the Securities Commission Malaysia clarified digital asset broking requirements on January 30, 2026, compliance officers at Capital Markets Services Licence holders faced a familiar problem: regu
Regulatory Obligations ManagementWhen two managed investment schemes collapsed in Australia, the investigations revealed a familiar pattern: governance frameworks that seemed adequate on paper but failed in practice. The Australian T
Regulatory Obligations ManagementThe FCA s Mills Review, released in January, has prompted internal audit teams to quickly assess its implications. With feedback due by 24 February, many are questioning how to engage with the review
Regulatory Obligations ManagementThe Conventional Wisdom Your compliance team managing OTC derivatives might be celebrating the European Supervisory Authorities proposed amendments to bilateral margin requirements. The logic seems st
Third-Party Risk ManagementThe European Supervisory Authorities (EBA, EIOPA, and ESMA) have issued a joint statement highlighting the cyber risks associated with frontier AI models. They urge financial entities to enhance gover
Regulatory Obligations ManagementThe Question at Hand Your compliance team is evaluating a transaction monitoring platform. The vendor demo looks polished, the features meet your requirements, and the price is reasonable. But here s
Privacy & Data ProtectionThe Challenge On January 1, 2026, the Indiana Consumer Data Protection Act (CDPA) took effect, giving enforcement authority to the Indiana Attorney General s Office. For a mid-sized Midwest retailer o
Ethics & ConductSpain s Draft Organic Law on Public Integrity introduces a mandatory compliance checkpoint for companies pursuing public sector contracts. You ll need to demonstrate an appropriate organization and ma
