Compliance

Of the nine enforcement cases CCI examined where companies received credit for timely disclosure, only two included a measurable time window. In several others, the timeliness clock had effectively run out before the company acted — a whistleblower, a press report or a parallel investigation had already answered the question. CCI editorial director Jennifer Gaskin examines what the enforcement record...

The first under the new policy shows what companies stand to gain and what they need to have in place before problem surfaces

Companies will increasingly be judged on whether they could have found problems sooner

Making problems into physical representations can help solve issues

This guide explores why UBO sits at the center of third-party risk management and what organizations must do to keep pace with tightening global expectations.

The law might suggest warnings are required in limited situations, but that’s not how it plays out

Uptake likely would depend on company size, age & competitive landscape

False Claims Act recoveries and whistleblower numbers point to something deeper than individual enforcement actions. The experts CCI contributing writer Trevor Treharne spoke with say the pattern isn't a lack of compliance programs in healthcare; it's programs designed to survive audits rather than shape behavior. A proposed HIPAA rule would eliminate the last major workaround organizations have used to avoid...

Why compliance leaders must shift from a “document-first” to a “data-first” philosophy in the AI era

Entity list controls follow the item to the end user regardless of how many borders it crosses or how many hands assemble it

AI literacy has survived attempts to water it down and remains a direct organizational obligation — not a policy aspiration

Humans in the loop — actually empowered to act