Featured

The five pillars of the cognitive risk framework (CRF) are designed to provide a 3D view of enterprise risks. James Bone details here additional levers of risk governance in the final three pillars of the CRF. In earlier installments, James...

Continually evolving data privacy legislation has put three approaching storm fronts on a collision course. Sandy Erez stresses that corporations should chart the unknown terrain to avoid ending up in the public eye of that potential “perfect storm.” A Legislative...

Vault Platform CEO Neta Meidav explores how to create a “speak up” culture in the workplace – one that ensures employees don’t fear retribution if whistleblowing or reporting harassment. Though the roots of #MeToo trace back upward of a decade,...

Pop quiz! What’s the best time to engage an independent monitor for an M&A process? Answer: “as early as is practicable.” Jay Rosen explores how an independent integrity monitor can benefit the entire M&A process. By engaging an independent monitor...

Generation Z is poised to comprise nearly a quarter of the global workforce – and they’ll shortly become the first line of defense for most organizations. MetricStream COO Gaurav Kapoor discusses some unique attributes, expectations and risks associated with Gen...

Shifting from an “outside-in” to an “inside-out” security strategy enables an organization to adapt readily to an ever-changing regulatory landscape – despite resource constraints. Optiv’s John Clark discusses. The adoption of the General Data Protection Regulation (GDPR) in April 2016...

G4S’ Rachelle Loyear points to several risk data points from ISACA’s recent State of Enterprise Risk Management survey, offers tactics to improve risk mitigation efforts and shares tips for learning from past industry trends. If you keep tabs on trends...

Compliance professionals’ jobs are made immeasurably more difficult without the support of the board. Michael Volkov offers five concrete actions the compliance department can take to enhance the board-compliance relationship. In today’s aggressive enforcement environment, corporate board members have a...

Jay Rosen considers what a monitor would review to determine if a company adequately considered ethics and compliance during the M&A process. There are two distinct phases in the M&A process: pre- and post-acquisition. In each phase, an independent monitor...

Whistleblower cases may be the next trend in cybersecurity litigation. Morrison & Foerster’s Kristen J. Mathews, Mark David McPherson and Janie Schulman discuss various measures and best practices for companies in guarding against potential liability. While there has (understandably) been...

With the California Consumer Privacy Act (CCPA) going into effect shortly, eSentire’s Mark Sangster deliberates on evolving data privacy laws and how companies can ensure stronger data privacy for customers. The 2018 Cambridge Analytica scandal was a watershed moment for...

In multiple recent cases, it seems the DOJ has softened its approach on charging self-disclosing companies for FCPA crimes involving aggravated circumstances. Bass, Berry & Sims’ Lindsey Fetzer, Thad McBride and Abby Yi discuss the implications. The U.S. Foreign Corrupt...