• Enterprise Risk Management software RFP template: questions and scoring  

    Enterprise Risk Management software RFP template: questions and scoring  

    Enter your details and we’ll email you the Enterprise Risk RFP template: Why do organizations invest in Enterprise Risk Management software?  Despite increasing regulatory pressure and growing organizational complexity, many businesses still rely on manual processes to manage enterprise risk.  Sticking to manual processes, often results in:  A risk register isn’t a risk strategy.  Modern…

  • US banking regulators scrap their third-party risk rulebook: what principles-based oversight really demands

    US banking regulators scrap their third-party risk rulebook: what principles-based oversight really demands

    US regulators want banks to stop following a checklist and start defending their own judgement on vendor risk, a shift now spreading well beyond American banking.  Key takeaways  Introduction: risk and compliance beyond the checklist   For the best part of 3 years, a compliance officer at a mid-sized US bank has had a simple, if…

  • Spotlight on Women in GRC: Director of Risk’s predictions for enterprise risk management

    Spotlight on Women in GRC: Director of Risk’s predictions for enterprise risk management

    We’re living in a risk environment that is becoming harder to untangle. BDO’s 2026 Global Risk Landscape survey of 500 C-suite executives found that 80% of business leaders believe the global risk environment is more defined by crisis than ever before.   Meanwhile, Aon’s 2025 Global Risk Management Survey, drawing on nearly 3,000 risk and business…

  • Why employee engagement is critical to your GRC program’s success: key takeaways from Gartner ERAC 

    Why employee engagement is critical to your GRC program’s success: key takeaways from Gartner ERAC 

    Effective GRC (governance, risk, and compliance) depends on the people across your organization. You can have well-designed, optimized processes supported by sophisticated technology that automates workflows. However, if employees and other stakeholders are not engaged or do not follow those processes, the value is lost. People provide the data, insights, and critical review that make…

  • How to manage risk and resilience using the 5 capitals model 

    How to manage risk and resilience using the 5 capitals model 

    Most organizations still run risk management and resilience planning as separate functions. A 5 capitals model shows why treating them as one builds real business resilience.  Key takeaways for this risk and resilience guide   Introduction: flipping the risk management coin  A few years ago, one UK firm made a small, telling change. Its risk and…

  • From risk management to business outcomes: what Gartner’s GRC insights mean for risk leaders 

    From risk management to business outcomes: what Gartner’s GRC insights mean for risk leaders 

    Risk leaders do not need more information. They need more of the right context.  That was one of the clearest themes we took from the 2026, North American, Gartner’s Enterprise Risk, Audit and Compliance Conference. Across sessions the conversation repeatedly came back to a bigger question: how can GRC help organizations make better decisions and…