Tag: Risk Management
-
How to manage risk and resilience using the 5 capitals model
Read more: How to manage risk and resilience using the 5 capitals modelMost organizations still run risk management and resilience planning as separate functions. A 5 capitals model shows why treating them as one builds real business resilience. Key takeaways for this risk and resilience guide Introduction: flipping the risk management coin A few years ago, one UK firm made a small, telling change. Its risk and…
-
From risk management to business outcomes: what Gartner’s GRC insights mean for risk leaders
Read more: From risk management to business outcomes: what Gartner’s GRC insights mean for risk leadersRisk leaders do not need more information. They need more of the right context. That was one of the clearest themes we took from the 2026, North American, Gartner’s Enterprise Risk, Audit and Compliance Conference. Across sessions the conversation repeatedly came back to a bigger question: how can GRC help organizations make better decisions and…
-
CoreStream GRC & BRAVE: a differentiated transformative partnership helping directors move from managing risk to confident decision making
Read more: CoreStream GRC & BRAVE: a differentiated transformative partnership helping directors move from managing risk to confident decision makingObjectives@Risk™ Powered by CoreStream GRC combines objective-centric governance, risk and resilience expertise with flexible GRC technology to enable better decisions in an increasingly uncertain and fast-moving world. Organizations are operating in an environment where disruption is no longer an occasional event. Recent Corporate Governance Institute research highlighted the confidence paradox amongst boards. 85% are confident in the information they receive but only 35% feel they adequately understand and have access to…
-
There are no new risks, only new combinations: how pre-mortems and digital twins help GRC teams anticipate cascading risks
Read more: There are no new risks, only new combinations: how pre-mortems and digital twins help GRC teams anticipate cascading risksKey takeaways Introduction: when risks combine resilience can suffer When national governments began locking down in spring 2020, few risk registers anywhere carried a line for “global shortage of automotive microchips.” Carmakers, forecasting a pandemic-driven collapse in demand, canceled their orders just as consumer electronics manufacturers absorbed the freed-up capacity to build laptops and games consoles for people stuck at…
-
Risk
Read more: RiskWhat is risk? Risk is the effect of uncertainty on an organization’s objectives. In simple terms, risk is what could happen that may affect whether an organization achieves what it set out to do. In governance, risk, and compliance (GRC), risk matters because decisions are rarely made with perfect certainty. Organizations need a clear way…
-
CoreStream GRC to attend Gartner’s Enterprise Risk, Audit & Compliance Conference 2026
Read more: CoreStream GRC to attend Gartner’s Enterprise Risk, Audit & Compliance Conference 2026CoreStream GRC, the GRC platform that truly works for you, is pleased to be attending the Gartner Enterprise Risk, Audit & Compliance Conference 2026 in Grapevine, Texas, bringing together risk, audit, compliance, and governance leaders to explore the future of enterprise risk management, AI, regulatory intelligence, and business resilience. Traditional risk programs are often too rigid and retrospective to…
-
Why risk and compliance leaders should attend #RISK Expo Europe 2026
Read more: Why risk and compliance leaders should attend #RISK Expo Europe 2026Community event: join CoreStream GRC after day 1 After day 1 of #RISK Expo Europe 2026, CoreStream GRC will host an exclusive community event. This will be a smaller, more relaxed space to step away from ExCeL London, decompress after a packed day, and continue the conversation with risk peers, clients, partners and the CoreStream GRC team over good wine and good company. Event details …
-
Why easy login can create risk in GRC and Conflict of Interest systems
Read more: Why easy login can create risk in GRC and Conflict of Interest systemsBy Mike VidoniSenior GRC Client Executive & Customer Success, CoreStream GRC Key takeaways Introduction: When does convenience become a control weakness? GRC teams need people to use their systems. A Conflict of Interest process cannot work properly if employees, or board members struggle to complete disclosures because the process is unnecessarily complicated. But login design is not simply a usability decision. It…
-
What is ISO 27001? A practical guide to information security management
Read more: What is ISO 27001? A practical guide to information security managementAbstract ISO 27001 gives organizations a structured way to manage information security risk. But for many teams, the real challenge is not understanding the standard. It is maintaining the evidence, ownership and control visibility needed to prove the system works. This guide should explain what ISO 27001 is, why it matters, how certification works, what Annex A controls cover, and why…
-
5 overlooked retail GRC risks senior leaders should be watching
Read more: 5 overlooked retail GRC risks senior leaders should be watchingKey takeaways Retail leaders are focused on growth, margin, resilience, customer trust and operational performance. For GRC teams to add real value, they need to connect risk and controls to those outcomes, not manage them in isolation. Recent retail examples show why this matters. Lindsay Haselhurst, Chief Operating Officer at Currys, said retail crime statistics “make for difficult reading”, but the…