GRC blogs
Explore our blogs for expert insights, industry updates, and practical guidance
Designed to challenge ways of thinking and help your enterprise excel in GRC.
-
Spotlight on Women in GRC: Building resilient organizations through better risk leadership
Read more: Spotlight on Women in GRC: Building resilient organizations through better risk leadershipChy Flynn on transitioning from operations into enterprise risk, building executive engagement, developing future risk leaders, and why communication and business understanding matter more than technical risk expertise. In the latest Spotlight on Women in GRC podcast, host Lucy Montague speaks with Chy Flynn, Head of Enterprise Risk at Rolls-Royce, about what separates exceptional risk…
-
Spotlight on Women in GRC: what high-performing risk functions do differently
Read more: Spotlight on Women in GRC: what high-performing risk functions do differentlyIn the latest Spotlight on Women in GRC podcast, host Lucy Montague speaks with Rebecca McLean, AXA Insurance’s Risk, Conduct & Governance Director, a senior risk leader with experience across insurance, broking, governance, operational risk, control optimization, and regulatory transformation, and the winner of 2025’s Risk Role Model of the Year at the Women in…
-
The cost of doing nothing: how to build a business case for integrated risk management and compliance automation
Read more: The cost of doing nothing: how to build a business case for integrated risk management and compliance automationDoing nothing feels safe because the cost of outdated GRC software never appears in the budget. Here’s how to measure that cost and build a business case for modernizing your risk management and compliance program that finance will back. Key takeaways on building a business case for modern GRC Introduction: why the status quo is…
-
How to put objectives at the center of your risk management program
Read more: How to put objectives at the center of your risk management programOrganizations do not exist to manage risks. They exist to achieve objectives. Yet too many risk programs are still built around the risk register. Teams spend countless hours identifying, scoring, and reviewing risks, only to be left with a list of red, amber, and green ratings that offer little insight into what leaders actually need…
-
Spotlight on Women in GRC: What global logistics teaches us about the future of compliance
Read more: Spotlight on Women in GRC: What global logistics teaches us about the future of complianceLila Landis on building compliance across 100 countries, winning stakeholder support through influence rather than authority, and ensuring GRC helps organizations move faster rather than slowing them down. In the latest Spotlight on Women in GRC podcast, host Lucy Montague speaks with Lila Landis, Global Head of Compliance at JAS Worldwide, a global freight forwarder,…
-
Spotlight on Women in GRC: Building an effective risk culture with a Chief Risk Officer
Read more: Spotlight on Women in GRC: Building an effective risk culture with a Chief Risk OfficerNadia Crawford on changing perceptions of risk, building credibility through continuous learning, and why effective risk management starts long before a decision reaches the risk team. Putting people at the heart of your risk programs Many risk leaders begin their careers in governance, compliance, or audit. Nadia Crawford’s route was different. Starting in process improvement,…
-
2026 risk review: the forecasts were right, so why were so few organizations ready?
Read more: 2026 risk review: the forecasts were right, so why were so few organizations ready?Gartner, PwC, Deloitte and the WEF identified 2026’s biggest risks. We compare their forecasts with what really happened, and ask why so few organizations were ready. Key takeaways Introduction: the risks that were missed Picture a risk committee meeting in late January 2026. Near the front of the board pack sits a single line lifted…
-
EU AI Act in practice: bringing data protection into your action plan
Read more: EU AI Act in practice: bringing data protection into your action planMost organizations are treating the EU AI Act as a standalone compliance project. That’s a mistake. If your AI systems process personal data, AI compliance doesn’t sit in its own silo. Treating these responsibilities separately risks duplicated work, inconsistent controls and gaps in accountability. Data protection, governance, risk management, audit and compliance all have a…
-
Spotlight on Women in GRC: What US healthcare compliance teaches us about modern GRC
Read more: Spotlight on Women in GRC: What US healthcare compliance teaches us about modern GRCDebbie Nemeth on managing healthcare compliance across 50 states, governing AI where the consequences can affect patient care, and reporting compliance in language business leaders will act on. In the latest Spotlight on Women in GRC podcast, host Lucy Montague speaks with Debbie, the series’ first American guest, about what US healthcare compliance can teach…
-
Enterprise Risk Management software RFP template: questions and scoring
Read more: Enterprise Risk Management software RFP template: questions and scoringEnter your details and we’ll email you the Enterprise Risk RFP template: Why do organizations invest in Enterprise Risk Management software? Despite increasing regulatory pressure and growing organizational complexity, many businesses still rely on manual processes to manage enterprise risk. Sticking to manual processes, often results in: A risk register isn’t a risk strategy. Modern…
Ready to speak to our experts?
Discover our case studies
The success stories of flexible intuitive GRC technology
-
CASE STUDY: Implementation success story
Raising the bar on Conflict of Interest management: CoreStream GRC’s high quality implementation services success story Everyone’s heard the horror stories of GRC implementations that drag on for months, sometimes years, with personnel moving in and out as people leave before the project is done. It’s no wonder risk and compliance teams cling to the devil they know. The fear of scope creep, decision paralysis, slipping timelines, and sheer…
-
CASE STUDY: Wood Group
Simplifying global audit management with CoreStream GRC Key takeaways Wood is a global engineering and operations business with around 35,000 people across 60 countries. After a major acquisition, its assurance, action tracking and non-conformance processes were spread across around 45 different systems: “We found we had somewhere in the region of 45 action tracking systems. They ranged from HTML to SharePoint…
-
CASE STUDY: COI GRC 2020 solution perspective
The client stories behind Michael Rasmussen’s Conflict of Interest Management solution perspective for CoreStream GRC Introduction Michael Rasmussen, globally recognized GRC thought leader and former Forrester analyst who originally defined the Governance, Risk, and Compliance market, recently drafted his perspective on CoreStream GRC’s conflict of interest solution. For this analysis, Michael engaged with 3 organizations actively using the CoreStream GRC platform to manage conflicts of interest. While operating in…
Ready to upgrade your GRC tech?
Contact the team and request your demo today.
This form may not be visible due to adblockers, or JavaScript not being enabled.