For more than two decades, assurance and compliance frameworks have rested on a simple assumption: Material decisions are made by people. Post‑Sarbanes-Oxley Act (SOX) assurance reset worked because it aligned accountability with human behavior. That assumption shapes how internal controls are designed, how accountability is assigned, and how assurance is delivered.
CW survey finds compliance teams struggling to scale due diligence beyond direct vendors
Compliance and risk professionals surveyed about their third-party due diligence programs report growing strain as organizations manage larger vendor ecosystems with limited resources and rising regulatory expectations.
Congress Is About to Regulate Crypto. Criminals Are Ready.
Congress is moving toward rules for cryptocurrency. That’s overdue. For years, crypto markets have grown faster than the laws meant to ensure they aren’t exploited by criminals.
Building resilient teams in cyberdefense
The stress on cyberdefense teams can be accurately described as a form of chronic occupational trauma stemming from several unique pressures. But there are ways to build a culture that combats these pressures.
The invisible cost of digital defense on mental health
Cybersecurity professionals, particularly those in leadership roles, often face immense pressure and stress due to the constant threat of cyberattacks.
How to identify and mitigate risks posed by Foreign Terrorist Organizations
Since Inauguration Day on Jan. 20, 2025, the Trump Administration has made it a priority to expand the list of designated Foreign Terrorist Organizations.
Emerging antitrust risks in the expanded use of AI
Concerns over competitors using AI pricing tools to fix prices have dominated antitrust discussions in the U.S. and EU. Recent cases show how algorithmic pricing might enable unlawful coordination.
How Ethics & Compliance Teams Are Adopting Artificial Intelligence (AI) Tools
This survey will explore how ethics & compliance (E&C) officers are adopting and leveraging artificial intelligence (AI), particularly generative AI, within their programs.
Write supply chain resilience into the contract
The only thing constant is change. Shouldn’t we be ready for that in our contracts?
Turning compliance into a competitive advantage in defense tech
For emerging defense tech companies to take full advantage of acquisition reforms and increased funding, they will need to overcome a defining feature of the U.S. defense industry: It is highly regulated, and will likely remain so.


