In-depth coverage of governance frameworks, risk management, compliance programs, and regulatory developments.
Board Committees and GovernancePurpose of This Checklist Despite reforms like the Sarbanes-Oxley Act and enhanced governance frameworks, simple frauds still succeed. First Brands and Tricolor both collapsed in September 2025 after
Governance Codes and FrameworksThe question at hand You re redesigning your governance framework. One path offers clarity: detailed rules that specify exactly what your board must do, how many independent directors you need, which
Proxy and VotingPurpose of the Template If your organization is a proxy advisory firm, an asset manager relying on proxy advisors, or a public company monitoring voting recommendations, the DOJ s August 2026 withdraw
Ethics and ConductThe Challenge of Updating Your Code of Conduct Proposing an update to your code of conduct can often lead to silence in leadership meetings. Concerns about budget, legal involvement, and the adequacy
Get weekly security insights and compliance updates delivered to your inbox.
Enterprise Risk ManagementOrganizations often face a common issue: risk teams know what they need to communicate but spend excessive time managing the systems intended to facilitate this communication. These are not hypothetic
Governance Codes and FrameworksThe Decision You re Facing Your organization has relied on a compliance calendar for years, with annual audits and quarterly reviews setting the pace. You ve built workflows around these fixed dates,
Sustainability and ESGYour HVAC controller just became a network entry point. Your access control system shares infrastructure with payroll. Your lighting management platform connects to the same backbone that routes finan
Sustainability and ESGThe Corporate Sustainability Due Diligence Directive mandates that organizations systematically identify, prevent, and mitigate environmental and human rights risks across their operations and supply
Enterprise Risk ManagementMisconceptions in Cybersecurity Governance Many boards view cybersecurity directives as purely technical compliance exercises. When the NIS2 Directive appeared on executive agendas, the typical respon
Enterprise Risk ManagementPurpose of the Template Your organization s current Cybersecurity Framework likely doesn t address AI-specific risks. This template offers a structured addendum that integrates AI considerations into
generalDigital identity management is often seen as the domain of your IT security team. It involves authentication protocols, encryption standards, and technical controls. Your CISO manages the risk, your i
Enterprise Risk ManagementU.S. financial supervisors are recalibrating their approach. Exam scope is narrowing, procedural formalities are being trimmed, and supervisory bodies are placing greater weight on material risks over
Enterprise Risk ManagementYour board complains they can t act on your risk reports. Your C-suite asks for something more relevant. Line managers ignore your quarterly updates. You re producing volumes of risk data, but nobody
