GRC resources
Discover blogs, news, events and more from CoreStream GRC’s experts.
-
·
Spotlight on Women in GRC: Building an effective risk culture with a Chief Risk Officer
Nadia Crawford on changing perceptions of risk, building credibility through continuous learning, and why effective risk management starts long before a decision reaches the risk team. Putting people at the heart of your risk programs Many risk leaders begin their careers in governance, compliance, or audit. Nadia Crawford’s route was different. Starting in process improvement,…
-
·
Hackers turned French supermarket fridges into ovens: who owns the risk in your building and equipment controls?
Attackers overheated fridges in hundreds of French supermarkets using flaws flagged months earlier. Here’s what it teaches risk and compliance teams about legacy equipment and supplier risk. Key takeaways from the French supermarket hack Introduction: when freezers became ovens On the morning of Monday 12 October, staff at 100s of supermarkets across France found aisles…
-
·
2026 risk review: the forecasts were right, so why were so few organizations ready?
Gartner, PwC, Deloitte and the WEF identified 2026’s biggest risks. We compare their forecasts with what really happened, and ask why so few organizations were ready. Key takeaways Introduction: the risks that were missed Picture a risk committee meeting in late January 2026. Near the front of the board pack sits a single line lifted…
-
·
EU AI Act in practice: bringing data protection into your action plan
Most organizations are treating the EU AI Act as a standalone compliance project. That’s a mistake. If your AI systems process personal data, AI compliance doesn’t sit in its own silo. Treating these responsibilities separately risks duplicated work, inconsistent controls and gaps in accountability. Data protection, governance, risk management, audit and compliance all have a…
-
·
The ASOS breach shows why customer messaging platforms belong in your third-party risk management framework
Hackers used ASOS’s own app to announce its data breach. Here is what the attack, and the retailer’s response, teach GRC teams about third-party risk and incident response. Key takeaways from the ASOS data breach incident Introduction: the risk consequences when the breach notice comes from the attacker At around 10am on Tuesday 6 October,…
-
·
IT risk/ISO27001/NIS2/SOC 2
What is IT risk? IT risk is the risk that technology systems, data, infrastructure, people, or digital processes could fail, be disrupted, be misused, or expose the organization to harm. It includes risks linked to cybersecurity, system availability, data confidentiality, access controls, third parties, operational resilience, regulatory compliance, and technology change. In governance, risk, and…
Ready to chat with our experts?
Contact us today!
This form may not be visible due to adblockers, or JavaScript not being enabled.