Author: Richard Eddolls
-
Enterprise Risk Management software RFP template: questions and scoring
Read more: Enterprise Risk Management software RFP template: questions and scoringEnter your details and we’ll email you the Enterprise Risk RFP template: Why do organizations invest in Enterprise Risk Management software? Despite increasing regulatory pressure and growing organizational complexity, many businesses still rely on manual processes to manage enterprise risk. Sticking to manual processes, often results in: A risk register isn’t a risk strategy. Modern…
-
US banking regulators scrap their third-party risk rulebook: what principles-based oversight really demands
Read more: US banking regulators scrap their third-party risk rulebook: what principles-based oversight really demandsUS regulators want banks to stop following a checklist and start defending their own judgement on vendor risk, a shift now spreading well beyond American banking. Key takeaways Introduction: risk and compliance beyond the checklist For the best part of 3 years, a compliance officer at a mid-sized US bank has had a simple, if…
-
Spotlight on Women in GRC: Director of Risk’s predictions for enterprise risk management
Read more: Spotlight on Women in GRC: Director of Risk’s predictions for enterprise risk managementWe’re living in a risk environment that is becoming harder to untangle. BDO’s 2026 Global Risk Landscape survey of 500 C-suite executives found that 80% of business leaders believe the global risk environment is more defined by crisis than ever before. Meanwhile, Aon’s 2025 Global Risk Management Survey, drawing on nearly 3,000 risk and business…
-
Why employee engagement is critical to your GRC program’s success: key takeaways from Gartner ERAC
Read more: Why employee engagement is critical to your GRC program’s success: key takeaways from Gartner ERACEffective GRC (governance, risk, and compliance) depends on the people across your organization. You can have well-designed, optimized processes supported by sophisticated technology that automates workflows. However, if employees and other stakeholders are not engaged or do not follow those processes, the value is lost. People provide the data, insights, and critical review that make…
-
How to manage risk and resilience using the 5 capitals model
Read more: How to manage risk and resilience using the 5 capitals modelMost organizations still run risk management and resilience planning as separate functions. A 5 capitals model shows why treating them as one builds real business resilience. Key takeaways for this risk and resilience guide Introduction: flipping the risk management coin A few years ago, one UK firm made a small, telling change. Its risk and…
-
From risk management to business outcomes: what Gartner’s GRC insights mean for risk leaders
Read more: From risk management to business outcomes: what Gartner’s GRC insights mean for risk leadersRisk leaders do not need more information. They need more of the right context. That was one of the clearest themes we took from the 2026, North American, Gartner’s Enterprise Risk, Audit and Compliance Conference. Across sessions the conversation repeatedly came back to a bigger question: how can GRC help organizations make better decisions and…
-
The future of risk, cybersecurity, and due diligence: Key insights from CoreStream GRC’s upcoming industry panels
Read more: The future of risk, cybersecurity, and due diligence: Key insights from CoreStream GRC’s upcoming industry panelsIf there is one theme that has emerged from CoreStream GRC’s news and insights coverage throughout 2026, it’s this: Risk is becoming more interconnected, more technology-driven, and more business-critical than ever before. As preparations begin for Risk Expo Europe 2026 and XapienXchange London 2026, many of the questions dominating boardrooms today are the same issues CoreStream GRC has been tracking throughout the year: The result…
-
CoreStream GRC shortlisted for Best Use of AI in GRC, and together with SANNOS for Technology Innovation in GRC at the #RISK Awards 2026
Read more: CoreStream GRC shortlisted for Best Use of AI in GRC, and together with SANNOS for Technology Innovation in GRC at the #RISK Awards 2026London, 9th September 2026 – CoreStream GRC, in partnership with SANNOS AI, is proud to announce that it has been shortlisted for the Technology Innovation in GRC: SME category at the RISK Awards 2026, recognizing innovative solutions that are transforming how Governance, Risk & Compliance is delivered. Recognition for innovation in modern GRC “Innovation isn’t defined by the size of an organization, it’s defined by how effectively new ideas are turned into…
-
Norway’s BankID outage shows what DORA-grade third-party risk management actually requires
Read more: Norway’s BankID outage shows what DORA-grade third-party risk management actually requiresFor 2 days, millions of Norwegians couldn’t sign a contract, complete a house sale or access a health record because a single supplier’s infrastructure failed for the second time in 5 years. What happens when an entire country’s digital ID depends on a single supplier? On the morning of 3 September 2026, a real estate agent in…
-
CoreStream GRC & BRAVE: a differentiated transformative partnership helping directors move from managing risk to confident decision making
Read more: CoreStream GRC & BRAVE: a differentiated transformative partnership helping directors move from managing risk to confident decision makingObjectives@Risk™ Powered by CoreStream GRC combines objective-centric governance, risk and resilience expertise with flexible GRC technology to enable better decisions in an increasingly uncertain and fast-moving world. Organizations are operating in an environment where disruption is no longer an occasional event. Recent Corporate Governance Institute research highlighted the confidence paradox amongst boards. 85% are confident in the information they receive but only 35% feel they adequately understand and have access to…