Author: Esme Dyos
-

Spotlight on Women in GRC: Former Head of Internal Financial Controls on AI, leadership & work-life balance
Read more: Spotlight on Women in GRC: Former Head of Internal Financial Controls on AI, leadership & work-life balanceTo countdown to the Women in GRC Awards on 2 July 2026, we are running a podcast series, “Spotlight on Women in GRC”. In this episode, CoreSream GRC’s Head of Marketing, Lucy Montague sits down with Nikki Absolom, Tax Technology and Transformation Lead at IVC Evidensia, former Head of Controls at Pets at Home, and an Independent Board…
-

CoreStream GRC 3.5 Release Notes
Read more: CoreStream GRC 3.5 Release Notes1.0 Document purpose This document provides a summary of the highlights of the CoreStream GRC Release 3.5 release. Major Platform releases are finalized every 2-3 months depending on client and strategic priorities. These release notes are part of CoreStream GRC’s approach to keeping clients and partners informed of the improvements we are delivering. This document summarizes the key user stories and issue fixes, categorized in the following ways,…
-

Third-Party Risk Management software RFP template: questions and scoring
Read more: Third-Party Risk Management software RFP template: questions and scoringEnter your details and we’ll email you the Third Party Risk RFP template: For a lot of organizations, the search for Third-Party Risk Management software starts when the current process stops giving the team a reliable view of risk. Maybe supplier onboarding still runs through email chains, spreadsheets, shared folders, and disconnected questionnaires. Maybe due diligence happens before…
-

Recent Bank of England warning and why AI-driven cyber threats are now a top concern for banking regulators globally
Read more: Recent Bank of England warning and why AI-driven cyber threats are now a top concern for banking regulators globallyKey takeaways Introduction: Is AI changing the cyber threat environment faster than organizations can respond? AI is not only a technology that organizations need to govern internally. It is also reshaping the external cyber threat environment. Used well, AI can help teams detect vulnerabilities, strengthen defenses and respond to incidents more quickly. However, the same capabilities can create new attack…
-

Spotlight on Women in GRC: Senior Risk Officer from the banking sector on AI, risk reporting & TPRM
Read more: Spotlight on Women in GRC: Senior Risk Officer from the banking sector on AI, risk reporting & TPRMIn advance of the Women in GRC Awards on 2 July 2026, we are running a podcast series, “Spotlight on Women in GRC”. In this episode, CoreStream GRC Head of Marketing Lucy Montague sits down with Rita Parmar, a Senior Risk Officer with vast experience across the finance sector. As well as Sarbanes-Oxley compliance, governance, regulatory reporting, and non-financial risk. The discussion explores; Rita also shares her…
-

Policy Management software RFP template: questions and scoring
Read more: Policy Management software RFP template: questions and scoringEnter your details and we’ll email you the Policy RFP template: Why do organizations invest in Policy Management software? For many organizations, policy management starts with shared drives, document repositories, spreadsheets, and email-based approvals. While these approaches may work initially, they often become harder to manage as the business grows and compliance requirements increase. The challenge is…
-

When employees become the attack surface: lessons from the Carnival breach
Read more: When employees become the attack surface: lessons from the Carnival breachKey Takeaways Introduction: what happened in the Carnival data breach? Carnival Corporation is one of the world’s largest cruise operators, with a portfolio of cruise brands serving customers across international markets. On 14 April 2026, Carnival Corporation said its IT security team identified unauthorized activity involving an employee account. According to the company, an unauthorized…
-

Michael Rasmussen podcast with Richard Eddolls: why CoreStream GRC focuses on value-based GRC technology
Read more: Michael Rasmussen podcast with Richard Eddolls: why CoreStream GRC focuses on value-based GRC technologySpeakers: Michael Rasmussen, GRC 20/20, and Richard Eddolls, Co-Founder and Chief Product Officer, CoreStream GRC In this episode of The Hitchhiker’s Guide in the GRC Technology Galaxy, Michael Rasmussen returned to CoreStream GRC’s London office to speak with Richard Eddolls, Co-Founder and Chief Product Officer at CoreStream GRC. The conversation explored the origins of CoreStream GRC, why flexibility and usability still matter in enterprise…
-

5 overlooked retail GRC risks senior leaders should be watching
Read more: 5 overlooked retail GRC risks senior leaders should be watchingKey takeaways Retail leaders are focused on growth, margin, resilience, customer trust and operational performance. For GRC teams to add real value, they need to connect risk and controls to those outcomes, not manage them in isolation. Recent retail examples show why this matters. Lindsay Haselhurst, Chief Operating Officer at Currys, said retail crime statistics “make for difficult reading”, but the…
-

Spotlight on Women in GRC: Risk Director on AI, trust & career paths
Read more: Spotlight on Women in GRC: Risk Director on AI, trust & career pathsIn anticipation for the Women in GRC Awards on 2nd July 2026, we’re running a podcast series “Spotlight on Women in GRC”. In this first episode, Head of Marketing, Lucy Montague of CoreStream GRC sits down with Lauren de Thibault, a Risk Director at a leading global telecommunications company and previous Women in GRC Award winner, and shares how a career spanning law, compliance, governance and risk shaped her leadership style. The…