Posted inRisk Management

When Enterprise Legal Management and GRC Collide

Software vendors offer a range of products known as “enterprise legal management” to help the legal department analyze spending, discern patterns, and manage costs. Given that many legal costs are the result of some governance or compliance risk, is there an opportunity to use enterprise legal data to improve your GRC program? The answers aren’t clear yet, but they are intriguing. More inside.

Posted inRisk Management

Practical Ideas on Managing Reputation Risk

Image: Reputation risk is the strategic business issue for many boards and senior executives today, and yet few know how to address it well. “Reputation is an ‘amplifier risk,’ because it attaches itself to other risks,” says Andrea Bonime-Blanc, head of consulting firm GEC Risk Advisory. She and others recommend several concrete steps to manage reputation risk, but they are not the sort of controls and processes you’re used to. More inside.

Posted inRisk Management

Smarter Assessments of Cyber-Risk

Image: Every compliance and audit executive wants to manage cyber-security risks. That assumes, however, that the whole organization agrees on what a cyber-security risk is. Taxonomies do exist to build a more disciplined approach to cyber-security. Try to take all steps to manage all such risks, and “it’s going to be very difficult to manage,” warns Greg Michaels, of Kroll’s cyber-security practice. More inside.

Posted inAccounting & Auditing

COSO Tacks Toward Cyber-Security

As cyber-security works its way onto the corporate board agenda, COSO is suggesting ways that its frameworks for internal control and risk management can be a starting point for companies to anticipate fast-emerging risks. “Just as the board is responsible for enterprise risk management, this is very similar,” says Mike Rose, a partner at Grant Thornton. So is the basic COSO approach, whether the risks are financial or cyber. More inside.

Posted inRisk Management

Survey: Cyber-Threats a Growing Concern for European Risk Managers

Image: Title: HirsWhile traditional risks due to business interruption and the supply chain remain risk managers’ top concern, cyber-risks are moving up the list, particularly in some European countries. Allianz SE’s Risk Barometer 2015 showed cyber-risks cracked the top five concerns globally for the first time, up from 8th last year, and they rose into the top three for Germany, Austria, and the United Kingdom. “The growing interdependency of many industries and processes means businesses are now exposed to an increasing number of disruptive scenarios … Risk management must reflect this new reality,” Allianz CEO Chris Fischer Hirs said. More inside.

Hidden Costs of Compliance: Reducing Transactional Tax Risk

Debates over online sales tax and related statutory rules and rate changes have vaulted sales and use tax compliance to the top of every finance organization’s 2015 action list. The challenge is on to understand how to implement safeguards and systems, monitor widely varying statutory rules, and find efficient ways to collect and remit the […]

Gift this article