“We can build that internally” sounds like control and savings — until the subject is AML risk assessment technology. A simple internal build can quietly become a governance liability. The real question isn’t whether the tool can be built, but whether it can be governed.
Opinion
Posted inBest Practices
AI in compliance: Are we still driving, or just riding shotgun?
AI may be able to detect risk faster than any compliance team—but it still cannot own accountability.
Posted inBest Practices
The implementation of biodiversity footprinting: Examining supply chains
Biodiversity is foundational to human health, economic stability, and industrial resilience, particularly within the pharmaceutical sector, which is intrinsically dependent on natural ecosystems.
Posted inBest Practices
AI, Data, and the Compliance Mandate: Lessons from APAC
AI governance is no longer a future-state exercise. It is a current control environment issue.
Posted inCryptocurrency and Digital Assets
The SEC’s crypto taxonomy changes everything. Pending enforcement targets should act now
The SEC’s Division of Corporation Finance published a 68-page interpretive release in March that, for the first time, defines what is and is not a security in the digital asset space.
Posted inWhistleblowers
World Whistleblower Day: Trust determines whether employees speak up
An employee knows something is wrong. They’ve seen the signs. Maybe they’ve quietly weighed the risks for weeks. The question isn’t whether your organization has a hotline. It’s whether employees trust it enough to use it. That question is at the heart of World Whistleblower Day.
Posted inBest Practices
From DOJ to in-house: Five mindset shifts for success in internal investigations
Hundreds of prosecutors and law enforcement agents have left the U.S. Department of Justice (“DOJ”) since January 2025. Many have landed or are seeking in-house jobs handling internal investigations of potential misconduct. But not all the instincts and skills they developed in DOJ will translate directly to the private sector. That was the message three […]
Posted inBest Practices
CFPB’s Rohit Chopra is back, and California is his new bureau
Tech companies and fintechs, consider this your warning.
Posted inBest Practices
The Tower of Babel and compliance role in AI governance
Recently,Pope Leo XIV issued his first Papal Encyclical Letter, titled Magnifica Humanitas “On Safeguarding the Human Person in the Time of Artificial Intelligence.” The document places AI within the long tradition of Catholic social teaching and asks how humanity should respond to the “new things” of the digital age. I wanted to review it from a compliance angle.
Posted inBest Practices
Two clean companies, one exposed entity
Why compliance integration after a merger is a risk event, not a cost exercise.
