Guides
-

Anthropic, OpenAI, and the UK government just sent the same cyber warning – here’s what you need to know as a GRC leader
Read more: Anthropic, OpenAI, and the UK government just sent the same cyber warning – here’s what you need to know as a GRC leaderLast week’s AI headlines did not just signal another round of model launches. They signaled a shift in cyber risk that business leaders should take seriously. In the space of a few days, Anthropic unveiled Mythos, OpenAI expanded trusted access to a more cyber-capable model for verified defenders and the UK government issued an open…
-

Gifts and Entertainment software RFP template: questions and scoring
Read more: Gifts and Entertainment software RFP template: questions and scoringEnter your details and we’ll email you the G&E RFP template: From talking with our expert community, we know that for a lot of teams, the search for gifts and entertainment software starts when the current process stops feeling defensible. Maybe declarations still sit across email chains, spreadsheets, shared folders, or basic forms that were never built for sensitive compliance…
-

As the US cools and Europe pushes on, ESG reporting is becoming a governance problem
Read more: As the US cools and Europe pushes on, ESG reporting is becoming a governance problemRecent ESG headlines are not pointing in one simple direction. In the U.S., the political environment has become less supportive of climate-related regulation under the current administration, but investor pressure has not disappeared. In the past week alone, investors pressed Amazon, Microsoft, and Google for sharper disclosure on the water and power demands of their…
-

The ICO has put AI hiring under the risk and compliance spotlight. Enterprise leaders should pay attention.
Read more: The ICO has put AI hiring under the risk and compliance spotlight. Enterprise leaders should pay attention.On 31 March 2026 UK’s Information Commissioner’s Office (ICO), called on businesses to review their use of automated decisions in recruitment and published fresh expectations for organizations using automated decision-making in hiring. The regulator said it had engaged with more than 30 employees, wrote to 16 organizations likely to be using automated decision-making in candidate…
-

The value-based guide to GDPR: EU and UK privacy compliance optimization
Read more: The value-based guide to GDPR: EU and UK privacy compliance optimizationAt its best, General Data Protection Regulation (GDPR) was never meant to be a paperwork regime. It was meant to change behavior. GDPR is a framework for making better decisions about data, proving accountability, reducing operational confusion, building trust, and protecting the business as it grows. That is the part too many organizations still miss…
-

Intelligence‑first GRC: the AI webinar every risk & compliance leader should watch
Read more: Intelligence‑first GRC: the AI webinar every risk & compliance leader should watchSpeakers: SANNOS’ CEO and CoreStream GRC’s GRC Strategy Director In the session, we explored why generic AI is falling short in regulated environments, what trusted, evidence-based AI looks like in practice, and how intelligence-first GRC can help teams reduce manual effort without losing confidence, control, or auditability. If you missed the live session, or want…
-

SANNOS chooses CoreStream GRC for their first global GRC platform integration for a truly intelligence first governance, risk, and compliance environment
Read more: SANNOS chooses CoreStream GRC for their first global GRC platform integration for a truly intelligence first governance, risk, and compliance environmentCoreStream GRC, the intuitive and flexible governance, risk, and compliance platform built for enterprise teams, has announced a strategic partnership with SANNOS, an AI-native compliance engine built to revolutionize risk and compliance programs trusted by Big 4 companies and large banks. Michael Rasmussen, of GRC 2020, who has been involved with Sannos since beta, and has worked alongside CoreStream GRC for over a decade, previously awarded CoreStream GRC the Enterprise Integrated GRC Architecture & Platforms innovation…
-

Intelligence-first AI GRC community networking event
Read more: Intelligence-first AI GRC community networking eventCoreStream GRC is proud to announce that we are the first global GRC platform to partner with SANNOS. To celebrate the brand new integration, we’re hosting a UK community event in London to explore what intelligence-first GRC actually looks like for our users. Agenda for the CoreStream GRC X SANNOS community event CoreStream GRC X SANNOS: An exciting partnership of 2 GRC power houses and a look ahead There is a lot of noise around AI in GRC right…
-

CoreStream GRC 3.4 Release Notes
Read more: CoreStream GRC 3.4 Release Notes1.0 Document Purpose This document provides a summary of the highlights of the CoreStream GRC Release 3.4 release. Major Platform releases are finalized every 2-3 months depending on client and strategic priorities. These release notes are part of CoreStream GRC’s approach to keeping clients and partners informed of the improvements we are delivering. This document…
-

CoreStream GRC shortlisted in the Women in GRC 2026 Awards
Read more: CoreStream GRC shortlisted in the Women in GRC 2026 AwardsWe’re proud to share that women across the CoreStream GRC community have been shortlisted in 4 categories at the 2026 Women in Governance, Risk, and Compliance Awards. This year’s shortlist reflects something we care deeply about at CoreStream GRC: practical female leadership. The kind that turns complex requirements into working systems, brings clarity to risk…