SAI360 Announces Acquisition of Plural Policy

Governance, Risk & Compliance: GRC

Your one-stop hub for strategic frameworks and best practices that integrate governance, risk management, and compliance into daily operations. Explore insights and real‑world examples that turn complex mandates into clear, resilient programs.

Navigating Healthcare’s IT Risk: 3 Strategies for Success

Healthcare Information Technology (IT) risk and cyber events are becoming more prevalent. In the meantime, healthcare’s attack surface is expanding quickly. This is especially true as remote technologies, connected devices such as the Internet of Things (IoT), and digitization all become more commonplace industry-wide. Of course, the pandemic only accelerated healthcare’s ongoing digitization. Healthcare data records—unlike other Personally Identifiable Information (PII) present drastically higher monetary value for cybercriminals. ...

By |2025-04-30T13:09:22+00:00March 15th, 2023|Compliance|

How to Combat Telehealth Fraud: 5 Smart Actions to Take 

Not long ago, telehealth adoption amidst COVID-19 soared--seemingly overnight—and continues to be mainstream. Now, unfortunately, telehealth fraud is, too. The number of data breaches have soared since the beginning of the pandemic. In fact, 2022 was the second-worst year ever regarding the number of reported data breaches—only to be topped by 2021.  Increased digital connections and communications in healthcare translates into increased audit and financial risks as ...

By |2023-03-15T05:28:59+00:00March 15th, 2023|Healthcare GRC|

5 Tips to Make Cyber Security in Australia a Business Priority

With over 200 reported cyber incidents every day, Australia is known as one of the most hacked countries in the world. Cyber security in Australia is very much needed. Australia's federal government recently issued the Enforcement Act with harsh penalties to incentivize businesses to improve privacy and data security measures. Penalties for severe and repeated interferences with privacy increased from 2.2 million to 50 million ...

By |2025-04-28T02:13:28+00:00March 14th, 2023|IT Risk & Cybersecurity|

Focus on Fundamentals for IT Security and Risk Management

Security and risk management (SRM) leaders are challenged today by the demands of their positions and expectations from stakeholders. Customers, regulators, auditors, and senior management want different things from SRM leaders. Identifying the processes and services that will demonstrate the value and communicate metrics and information sought by stakeholders is also difficult. Meanwhile, SRM leaders face regulatory requirements that are either new or continuously changing. ...

German Supply Chain Act: Improving international human rights through responsible supply chain management (infographic)

The German Supply Chain Act imposes a range of “due diligence obligations” aimed at reducing the human rights risks posed by global supply chains. The Act provides examples of such risks, including, but not limited to, child and forced labour, slavery, disregard of labor protection obligations, inequality and withholding of an adequate wage. Under the Act, firms are required to: Establish an internal risk management ...

Key Drivers for 2023 Data Privacy & Information Security Training

Data privacy and information security training continue to remain a top organizational priority. The number and sophistication level of phishing attacks continues to grow worldwide. In the six months ending October 2022, phishing attacks grew by 61 percent over the same period in the previous year. And a recent study by the Anti-Phishing Working Group (APWG) found that in the third quarter of 2022, worldwide phishing attacks ...

By |2025-04-28T02:12:58+00:00March 7th, 2023|Ethics & Compliance Learning, IT Risk & Cybersecurity|

Five Tips on Preparing for the SEC Climate Disclosure Rule

In March of 2022, U.S. Securities and Exchange Commission (SEC) proposed a rule requiring that registrants add a standard set of climate-related disclosures to their annual reporting. With uncertainty around the timing and detail of the final rule, how can SEC-regulated companies prepare to meet their obligations? The SEC’s new rules will require U.S. public companies to disclose climate-related risks and impacts. This Includes the ...

Five Tips on Preparing for the SEC Climate Disclosure Rule (PDF)

Thank you for your interest in Five Tips on Preparing for the SEC Climate Disclosure Rule. Download This resource provides five tips to ensure you're prepared with insight into what the SEC climate regulations may mean for your organization. It covers everything from ensuring ESG standards are aligned with enterprise risk management to meeting the challenge of third parties/supply chain. The SEC climate tip sheet ...