U.S. Banking regulators have moved to loosen traditional regulation and supervision in areas like capital requirements, stress testing and liquidity, while also being more receptive to innovation in areas including Artificial Intelligence and digital assets.ย
Third Party Risk
Provided by
Staying Ahead: Modern strategies for third-party risk in a disrupted world
This e-Book compiles expert insights andย real-world examples, offering practicalย guidance for compliance professionalsย navigating todayสผs complex landscape.ย
Posted inAnti-Bribery
Navigating 2025 Compliance Challenges: Laurie Waddy on Governance, Anticorruption Trends, Vendor Risk, and AI Compliance
Former Head of Compliance/Chief Compliance Officer Laurie Waddy believes compliance professionals are well-positioned to support artificial intelligence (AI) adoption in their organizations. Drawing on 25 yearsโ experience in legal and compliance roles across multiple industries, Waddy shares insights into top compliance trends confronting the profession, including the emerging compliance risks related to AI implementation.ย
Posted inRisk Management
TPRM programs can prove their worth by limiting damage of cyberattacks, data breaches
There are stories we tell ourselves in third-party risk management (TPRM) to make ourselves feel better about the corners we cut.
Posted inAccounting & Auditing
Communication and relationships is increasingly critical for compliance teams
Compliance is increasingly in the spotlight as companies are tackling everything from artificial intelligence and other new technologies to risk management and mitigation. But itโs soft skills of communication and relationship building that are becoming the most critical tools for success.
Posted inAnti-Bribery
CW TPRM Summit: Technology advancements are making export controls more important than ever
Russiaโs invasion of Ukraine has sparked a war with unusual implications: The U.S. has stepped up sanctions and export controls. But companies are increasingly learning that the most seemingly innocuous products can find themselves inย โdual use,โ as a product for daily life and a product for war. A gyroscope or a more advanced GPS chip might help improve a smartphoneโs capabilities, but they can also help to guide a missile.
Posted inAnti-Bribery
ESG isnโt just a buzzword, itโs vendor management, forced labor and more
ESG is no longer in vogue. But its issues still are.
Almost none of the nearlyย 200ย attendees at Compliance Weekโs Third Party Management summit ย this week said theyโre currently working on ESG when informally surveyed. The show-of-hands results marked a dramatic reversal from even just a couple years ago, surprising even attendees in the room.
Posted inBoards & Shareholders
TPRM Keynote speaker Cherepanova says directors donโt need specialization, they need critical thinking
Regulators and investors increasingly say boards of directors need more expertise to ensure they can respond to fast-changing politics, policy, and technology that threaten to undermine their businesses. In the U.K., government officials sayย boardsย needย to think more about cyber. In the EU, they need to prepare for theย Corporate Sustainability Reporting Directive (CSRD).ย Speaking atย Compliance Weekโs Third-Party Risk Management summit, Boards of the Future director Vera Cherepanova says that directors need to think broadly, rather than inย specialties.
Posted inRisk Management
Navigating compliance: A guide for small teams to tackle Cybersecurity Maturity Model Certification
Many small organizations within the Defense Industrial Base are struggling to meet the rigorous requirements validated through the Cybersecurity Maturity Model Certification, writesย Thomas Graham, CISO at Redspin.ย If you havenโt been tracking it closely, CMMC was finalized in October, with an effective date of December 16, 2024.
Posted inRegulatory Enforcement
DOJ fines MORSE Corp $4.6M for lax cyber controls amid crack down on federal contractors
Yet another government contractor has been slapped with a fine by the Department of Justice for applying lax cybersecurity defenses on sensitive government data.
