• CoreStream GRC 3.5 Release Notes

    CoreStream GRC 3.5 Release Notes

    1.0 Document purpose This document provides a summary of the highlights of the CoreStream GRC Release ​3.5​ release. Major Platform releases are finalized every 2-3 months depending on client and strategic priorities. These release notes are part of CoreStream GRC’s approach to keeping clients and partners informed of the improvements we are delivering.  This document summarizes the key user stories and issue fixes, categorized in the following ways,…

  • Third-Party Risk Management software RFP template: questions and scoring 

    Third-Party Risk Management software RFP template: questions and scoring 

    Enter your details and we’ll email you the Third Party Risk RFP template: For a lot of organizations, the search for Third-Party Risk Management software starts when the current process stops giving the team a reliable view of risk.  Maybe supplier onboarding still runs through email chains, spreadsheets, shared folders, and disconnected questionnaires. Maybe due diligence happens before…

  • Recent Bank of England warning and why AI-driven cyber threats are now a top concern for banking regulators globally

    Recent Bank of England warning and why AI-driven cyber threats are now a top concern for banking regulators globally

    Key takeaways  Introduction: Is AI changing the cyber threat environment faster than organizations can respond?  AI is not only a technology that organizations need to govern internally. It is also reshaping the external cyber threat environment. Used well, AI can help teams detect vulnerabilities, strengthen defenses and respond to incidents more quickly. However, the same capabilities can create new attack…

  • Spotlight on Women in GRC: Senior Risk Officer from the banking sector on AI, risk reporting & TPRM

    Spotlight on Women in GRC: Senior Risk Officer from the banking sector on AI, risk reporting & TPRM

    In advance of the Women in GRC Awards on 2 July 2026, we are running a podcast series, “Spotlight on Women in GRC”. In this episode, CoreStream GRC Head of Marketing Lucy Montague sits down with Rita Parmar, a Senior Risk Officer with vast experience across the finance sector. As well as Sarbanes-Oxley compliance, governance, regulatory reporting, and non-financial risk.  The discussion explores;    Rita also shares her…

  • Policy Management software RFP template: questions and scoring 

    Policy Management software RFP template: questions and scoring 

    Enter your details and we’ll email you the Policy RFP template: Why do organizations invest in Policy Management software? For many organizations, policy management starts with shared drives, document repositories, spreadsheets, and email-based approvals. While these approaches may work initially, they often become harder to manage as the business grows and compliance requirements increase.  The challenge is…

  • When employees become the attack surface: lessons from the Carnival breach

    When employees become the attack surface: lessons from the Carnival breach

    Key Takeaways Introduction: what happened in the Carnival data breach? Carnival Corporation is one of the world’s largest cruise operators, with a portfolio of cruise brands serving customers across international markets. On 14 April 2026, Carnival Corporation said its IT security team identified unauthorized activity involving an employee account. According to the company, an unauthorized…