Compliance Archives

The Only SOX Compliance Checklist You Need for 2026

When you are in the thick of SOX compliance, it is easy to miss the forest for the trees. You are managing real-time control updates, preparing for external auditors, mitigating security risks, and handling a dozen other disclosures. Today’s risk professionals have enough on their plates without having to constantly remind themselves why these regulations exist in the first place: to combat financial fraud and ...

By Heidi Sullivan|2026-01-29T20:11:16+00:00January 29th, 2026|Compliance, Financial Services GRC|

Predictive, Not Reactive: What AI Means for Modern Compliance Teams in 2026

If you work in compliance today, you know the ground is moving under your feet. Regulatory change is accelerating across every major jurisdiction. You are managing everything from GDPR and DORA in Europe to fast-evolving AI and ESG mandates globally. Regulators now expect more than just answers; they expect timely, evidence-backed responses and digital audit trails. Legacy systems were not designed for this environment. Static ...

By Heidi Sullivan|2026-01-26T20:53:25+00:00January 22nd, 2026|Compliance|

2026 CMS Enforcement: Your Data Accuracy Is Now Your Primary Revenue Defense

For years, you have likely operated under a "best-effort" compliance model. If you submitted your data, responded to audits reasonably well, and fixed errors as they arose, you remained safe. In 2026, that safety net disappears. The Centers for Medicare & Medicaid Services (CMS) is shifting its stance. They no longer want to see your effort; they want to see your proof. The new enforcement ...

By Heidi Sullivan|2026-01-06T14:18:24+00:00January 6th, 2026|Compliance, Healthcare GRC|

The 2026 Compliance Gap: Why “Check-the-Box” Can No Longer Protect Your Business

By 2031, cybercrime will cost the world $12.2 trillion annually. That is roughly $386,000 in damages every single second. If you are still managing risk with static spreadsheets or annual training cycles, you are fighting a digital war with analog tools. The compliance landscape for 2026 isn't just shifting; it is accelerating. From autonomous AI agents that make decisions without human oversight to "N-th party" ...

By Heidi Sullivan|2025-12-30T20:18:37+00:00January 2nd, 2026|Compliance, Governance, Risk & Compliance: GRC|

What the 2025 DOJ Guidance Means for Compliance Teams

You might be more exposed than you realize. Here is how to spot the red flags in your hiring and training programs before an investigation starts. In 2024 alone, the Department of Justice (DOJ) recovered around $2.7 billion through False Claims Act cases tied to compliance failures. With the 2025 guidance, DEI programs now sit in the same high-risk zone as billing fraud, procurement violations, ...

By Heidi Sullivan|2025-12-22T18:43:23+00:00December 22nd, 2025|Compliance|

How to Measure Compliance Program Effectiveness: Reporting Lines, Risk Assessments & More

Expectations for Compliance Officers continue to rise as they assume new areas of oversight, such as privacy compliance, internal audit, and compliance risk management. Given their wide range of responsibilities, not to mention the dynamic and demanding nature of their jobs, a number of important questions arise: How do you prove your compliance program is effective? Where should your Compliance Officer sit in the org ...

By Jacqueline DiChiara|2025-09-29T19:27:06+00:00September 28th, 2025|Compliance, Governance, Risk & Compliance: GRC|

How to Build Compliance Teams That Thrive Under Pressure

Tasked with managing risk, navigating uncertainty, and leading with clarity, compliance officers and their teams need to be able to operate under pressure and respond decisively. According to Fabiana Lacerca-Allen, JD, LLM, Chief Compliance Officer at Cipla USA and author of The Crisis Capable Leader, and Brenda Crabtree, former U.S. Naval officer turned Director of Compliance at Vaxcyte, these traits are best honed by leaning ...

By SAI360|2025-07-07T13:26:21+00:00July 7th, 2025|Compliance, Governance, Risk & Compliance: GRC|

Understanding DOJ Guidance: What’s the Impact on Corporate Compliance Programs?

The U.S. Department of Justice (DOJ) has long emphasized the importance of effective corporate compliance programs. While enforcement priorities may shift over time, the core expectations outlined in DOJ guidance remain consistent: programs must be well-designed, applied in good faith, and actually work in practice. What does that look like in real terms? First, programs must reflect the unique risks of the organization. There’s no ...

By SAI360|2025-08-15T18:59:18+00:00June 2nd, 2025|Compliance, Governance, Risk & Compliance: GRC|

A Quick Look at CPS 230 APRA: What Australia’s Standard Means for Financial Institutions

The CPS 230 APRA standard represents one of the most significant shifts in how Australian financial institutions manage operational risk. Introduced by the Australian Prudential Regulation Authority (APRA), CPS 230 is designed to strengthen resilience by improving oversight, risk visibility, and accountability across critical operations. This standard moves beyond reactive risk management. It encourages a culture of preparedness and clarity. And it ensures organizations are compliant ...

By SAI360|2025-05-07T19:32:35+00:00May 7th, 2025|Compliance, Governance, Risk & Compliance: GRC|

Watch Current State of Healthcare Compliance Programs: 2025 Benchmark Results

Current State of Healthcare Compliance Programs: 2025 Benchmark Results For the sixteenth year in a row, SAI360 partnered with Strategic Management Services to study the state of healthcare compliance programs in an industry benchmark survey of programs in the United States. This annual survey is designed to gain an understanding of issues currently confronting compliance programs and how compliance officers and organizations are responding to ...

By SAI360|2026-01-26T15:24:53+00:00April 18th, 2025|Compliance, Governance, Risk & Compliance: GRC, Healthcare GRC|

Compliance News

The Only SOX Compliance Checklist You Need for 2026

Predictive, Not Reactive: What AI Means for Modern Compliance Teams in 2026

2026 CMS Enforcement: Your Data Accuracy Is Now Your Primary Revenue Defense

The 2026 Compliance Gap: Why “Check-the-Box” Can No Longer Protect Your Business

What the 2025 DOJ Guidance Means for Compliance Teams

How to Measure Compliance Program Effectiveness: Reporting Lines, Risk Assessments & More

How to Build Compliance Teams That Thrive Under Pressure

Understanding DOJ Guidance: What’s the Impact on Corporate Compliance Programs?

A Quick Look at CPS 230 APRA: What Australia’s Standard Means for Financial Institutions

Watch Current State of Healthcare Compliance Programs: 2025 Benchmark Results

Solutions

Why SAI360

Resources

Company