All Articles

When an employee relocates, the company can take on a new state or country’s employment law, payroll taxes and other duties, often unintentionally

TXSE’s governance framework mostly tracks the incumbents, so the question for boards is where it doesn’t

The past several months have seen Anthropic go dark & OpenAI’s models slip into Hugging Face’s systems, signaling that AI risk is increasingly fluid

Nathan Fielder’s new documentary wants you to wonder whether Elizabeth Holmes merely thinks differently — too literal a mind to have knowingly lied. CCI editorial director Jennifer L. Gaskin isn’t buying it. Between the trial record, the black turtleneck traded for trad-wife neutrals and a new startup that looks an awful lot like Theranos with...

Plus: Directors say strategy execution is the oversight area most in need of improvement; tariffs overtake interest rates as dealmakers’ top worry heading into 2027; nearly 4 in 5 finance teams still fixing month-end close errors by hand

COSO’s 2025 attempt at board-oversight guidance was quite prescriptive, and the result was an unpopular publication that was eventually withdrawn. That’s how we got the streamlined version: 12 principles, not a step-by-step manual. Jim DeLoach of Protiviti reads each one as something wider than a directors’ document, a shared vocabulary for the audit, risk and...

A single well-built control can mitigate several risks at once, if compliance & risk management stop running on separate tracks

How much autonomy a bank can safely hand a machine depends less on the coming guidance than on how mature its existing model governance already is

Party change could put companies, settlements & compensation under a microscope

Plus: Directors downgrade own boards’ effectiveness; skipping human review of AI guidance triples fine rate; ransomware gangs turn to physical threats against staff

EU and G7 Russian diamond sanctions highlight a pattern the compliance community has seen again and again: regulators establishing requirements without prescribing verification methods, leaving technology vendors to define practical standards. CCI contributing writer Gordon Feller examines the benefits and risks of outsourcing compliance infrastructure through the prism of the diamond industry.

The question of whether ethics are universal or local is as old as philosophy, and the AI race has made it urgent again

Version numbers only tell you so much

The conditions and technology need to be in place for sound employee reporting

A sudden GC departure can upend investigations, derail regulatory strategy and leave compliance leaders scrambling to fill a critical leadership vacuum.

Plus: Directors’ AI use rises 30%; Money flow worries more than half of mission-driven organizations; Cyber threats lead risk for 2027; AI in lending concerns a third of banking professionals

Earned wage access — letting employees draw compensation they've already earned before payday — is among the fastest-growing benefits in the market, and among the most unevenly regulated. Federal guidance has flipped three times in five years and a dozen states have written their own rules. But the harder lesson for compliance teams, as CCI...

Plus: Three-fourths of risk leaders citing added pressure

A compliance program built on the assumption that federal labor rules stay put is now resting on shaky footing

Lessons for lenders from two billion-dollar failures seemingly built on misstated assets, double-pledged collateral and inflated invoices

Your standard diligence process is unlikely to be triggered by a vendor flipping on a new feature, which is how AI often ends up running amok

A handover judged only by whether meetings, papers and action logs stay current can let a long-running concern slide back to an earlier stage of scrutiny

The DOJ’s newest division has given its corporate fraud prosecutors their most substantive public guidance yet in the form of a memo that outlines factors they are to consider when deciding whether to bring charges against a corporation. CCI’s Jennifer L. Gaskin reports on what the McDonald memo means for corporate compliance programs and what’s...

When fluency & confidence pass for expertise, companies risk elevating the convincing over the capable

AB 2013 obligations are live now, and the practical question is not whether to comply but how much to disclose

A federal court has allowed wiretap and privacy claims against an AI notetaker to proceed

Korea will provide early, in-force test of tighter self-hosted-wallet controls under consideration in EU

Waves of OFAC actions have redrawn Iran-related exposure for aviation, shipping, digital assets, gold & tech

Could an SEC proposal for investors’ say on pay put more heat on directors?

Plus: Most companies experienced a cyberattack recently; C-suite rift revealed on business disruption