Close

Are you in compliance?

Don't miss out! Sign up today for our weekly newsletters and stay abreast of important GRC-related information and news.

Get updates on Compliance Week offerings, including new features, databases, research, and other resources, along with announcements of upcoming Webcasts, conferences, seminars, CPE/CLE opportunities and more.

Published every Thursday, Compliance Week Europe offers a condensed summary of risk, audit, and compliance news either originating in Europe, or of special interest to European compliance professionals. This newsletter will follow developments by the European Commission, as well as those of national governments across the region, or any U.S.-based news that might have consequence across the Atlantic. Frequency: weekly; Thursday a.m.

A fresh edition of Compliance Week delivered via e-mail and online every Tuesday morning, relentlessly focused on the disclosure, reporting and compliance requirements of our 25,000+ paying subscribers.

Published every Friday, Compliance Weekend was launched at the behest of subscribers, and offers a quick Plain English review of the week's key developments. We hope you enjoy this supplement to Compliance Week's Tuesday edition.

  • News bulletin

    Bridging the Divide Between COSO Frameworks Old and New

    August 26, 2014

    As companies work to implement the updated COSO internal control framework, they are finding they must close the gap from the old version to the new. Most common areas of concern include controls over risk assessments, outsourced service providers, and information quality. In these areas companies are identifying missing controls, or controls that exist but aren’t tested for operating effectiveness. “We have not seen many companies identifying principle gaps,” says Sandy Herrygers, a partner with Deloitte.

  • News bulletin

    Getting to Know You: Treasury Proposes New Rules on AML Due Diligence

    August 26, 2014

    Horn-charles-0814The Treasury Department’s Financial Crimes division has proposed new rules that will require financial firms to go to greater lengths to determine the real owners of the businesses with which they transact. The rules, intended to help the government pursue money laundering and terrorist financing, could help to prevent shadowy business from opening accounts. “Some financial institutions may determine it’s not worth the risk,” says Charles Horn, a partner with law firm Morgan Lewis.

  • News bulletin

    What’s the Auditor’s Role in Investigating Financial Fraud?

    August 26, 2014

    hedley-tim-0814Armed with professional skepticism and the authority to interrogate data and employees, auditors are a formidable opponent to corporate criminals—at least, in theory. In reality, though, external auditors uncover the misdeeds in just 3 percent of cases (5 percent at larger companies), which is less often than is discovered by accident. Why? “Normally, audit procedures are not designed to detect illegal acts,” Tim Hedley, global fraud risk management leader for KPMG, says.

  • News bulletin

    Hard Measures: Gauging the Effectiveness of Online Training

    August 26, 2014

    Fredeen-Ingrid-UpdatedNearly all companies provide some online compliance training. So how do they know it is working? Many don’t. But companies are getting better at evaluating the effectiveness of training and observing to see if it actually changes behavior at the company. “Over the last twelve to 18 months, I’m hearing more clients talk about effectiveness,” says Ingrid Fredeen, vice president of advisory services with NAVEX Global. 

     

  • News bulletin

    Lessons From Winnie the Pooh on Risk Assessments

    August 26, 2014

    When it comes to assessing risks or planning annual audits, companies may be making the same mistakes over and over again, perhaps realizing they are hitting a wall, but failing to find a way around. In the latest edition of our GRC Illustrated Series, which explores how to conduct risk assessments, Jason Mefford, president of Mefford Associates, outlines the proper steps for making your risk assessment work for your audit plan. More inside.

  • News bulletin

    PCI Guidance Provides Clarity to Payment Card Industry

    August 26, 2014

    Companies that rely on third-party service providers to handle their customers’ credit card data can rest a little easier. Um, assuming those providers play by the rules, that is. The Payment Card Industry Security Standards Council has issued new guidance on how to ensure that payment card data entrusted to third parties is securely maintained. It walks companies through the steps to verify that security measures are in place. More inside.

  • Robert Herz

    Inside the SEC’s Focus on Financial Reporting Fraud

    August 26, 2014

    Just over a year ago the Securities and Exchange Commission announced the formation of a Financial Reporting and Audit Task Force, intended to enhance the SEC’s ability to detect fraudulent and improper accounting, reporting, and auditing. Inside, columnist Robert Herz looks at recent SEC enforcement themes and actions on financial reporting fraud.