• Third-Party Risk Management software RFP template: questions and scoring 

    Third-Party Risk Management software RFP template: questions and scoring 

    Enter your details and we’ll email you the Third Party Risk RFP template: For a lot of organizations, the search for Third-Party Risk Management software starts when the current process stops giving the team a reliable view of risk.  Maybe supplier onboarding still runs through email chains, spreadsheets, shared folders, and disconnected questionnaires. Maybe due diligence happens before…

  • Recent Bank of England warning and why AI-driven cyber threats are now a top concern for banking regulators globally

    Recent Bank of England warning and why AI-driven cyber threats are now a top concern for banking regulators globally

    Key takeaways  Introduction: Is AI changing the cyber threat environment faster than organizations can respond?  AI is not only a technology that organizations need to govern internally. It is also reshaping the external cyber threat environment. Used well, AI can help teams detect vulnerabilities, strengthen defenses and respond to incidents more quickly. However, the same capabilities can create new attack…

  • Spotlight on Women in GRC: Senior Risk Officer from the banking sector on AI, risk reporting & TPRM

    Spotlight on Women in GRC: Senior Risk Officer from the banking sector on AI, risk reporting & TPRM

    In advance of the Women in GRC Awards on 2 July 2026, we are running a podcast series, “Spotlight on Women in GRC”. In this episode, CoreStream GRC Head of Marketing Lucy Montague sits down with Rita Parmar, a Senior Risk Officer with vast experience across the finance sector. As well as Sarbanes-Oxley compliance, governance, regulatory reporting, and non-financial risk.  The discussion explores;    Rita also shares her…

  • Policy Management software RFP template: questions and scoring 

    Policy Management software RFP template: questions and scoring 

    Enter your details and we’ll email you the Policy RFP template: Why do organizations invest in Policy Management software? For many organizations, policy management starts with shared drives, document repositories, spreadsheets, and email-based approvals. While these approaches may work initially, they often become harder to manage as the business grows and compliance requirements increase.  The challenge is…

  • When employees become the attack surface: lessons from the Carnival breach

    When employees become the attack surface: lessons from the Carnival breach

    Key Takeaways Introduction: what happened in the Carnival data breach? Carnival Corporation is one of the world’s largest cruise operators, with a portfolio of cruise brands serving customers across international markets. On 14 April 2026, Carnival Corporation said its IT security team identified unauthorized activity involving an employee account. According to the company, an unauthorized…

  • Michael Rasmussen podcast with Richard Eddolls: why CoreStream GRC focuses on value-based GRC technology 

    Michael Rasmussen podcast with Richard Eddolls: why CoreStream GRC focuses on value-based GRC technology 

    Speakers: Michael Rasmussen, GRC 20/20, and Richard Eddolls, Co-Founder and Chief Product Officer, CoreStream GRC In this episode of The Hitchhiker’s Guide in the GRC Technology Galaxy, Michael Rasmussen returned to CoreStream GRC’s London office to speak with Richard Eddolls, Co-Founder and Chief Product Officer at CoreStream GRC.  The conversation explored the origins of CoreStream GRC, why flexibility and usability still matter in enterprise…