SAI360 Announces Acquisition of Plural Policy

What Is APRA CPS 230? What to Know About this Australia’s Operational Resilience Standard

APRA CPS 230 is a regulatory standard introduced by the Australian Prudential Regulation Authority. Its goal is to improve operational resilience in the financial sector. It applies to a wide range of institutions—banks, insurers, super funds, and others that provide essential financial services in Australia. At the heart of CPS 230? A key focus on protecting critical services. These are the functions that, if disrupted, ...

By |2025-08-18T19:18:49+00:00August 18th, 2025|Business Resilience, Governance, Risk & Compliance: GRC|

How Whistleblower Hotline Software Enhances Anonymous Reporting and Workflow Efficiency

Organizations face growing pressure to uphold ethics and manage risk. One telling indicator: a 35% increase in the number of whistleblower cases managed by the Department of Justice. During the 2024 fiscal year, settlements and judgments tied to the False Claims Act hit nearly $3 billion. In recent weeks alone, for example: An airline paid over $8 million in fines for False Claims Act violations involving the misuse of funds.   ...

By |2025-09-23T17:00:56+00:00August 12th, 2025|Whistleblowing|

Common Causes of Organizational Silos, and What to Do About Them

Organizational silos aren’t just a byproduct of growth. They are a clear sign that something is not working. And while they can show up anywhere, certain environments are especially prone to them. Eight in ten companies say there's a stark mismatch between their department initiatives and their larger business initiatives.¹ The result? Nearly $9 trillion in estimated economic losses each year. When communication is stifled ...

By |2025-08-07T20:08:50+00:00August 4th, 2025|Governance, Risk & Compliance: GRC|

Meet “Integrity Sarah”, an Influencer Making Ethics & Compliance Education Stick

When it comes to corporate training, it is important to meet employees where they are. SAI360 is finding success leveraging the popularity of "influencer culture" and infotainment to engage today's workforce with serious ethics & compliance topics. Meet SAI360's Integrity Sarah. Just like many influencers found on YouTube and Instagram, she is sharp, confident in her expertise, and most important - relatable. Featured in SAI360's ...

By |2025-08-13T20:24:26+00:00August 4th, 2025|Code of Conduct, Ethics & Compliance Learning|

M&A Compliance Checklist: 5 Hidden Risks That Can Sink Deal Value

Hidden risks can vaporize anticipated Merger & Acquisition (M&A) returns and derail deal synergies. Acquiring a company means acquiring that company’s risk. Yet, too many deals stumble because compliance expertise arrives late, or not at all. Below, we highlight five common missteps related to compliance that can disrupt M&A transactions. Compliance Joins After the Ink Dries Clients tell us, “We weren’t informed of a pending M&A ...

By |2025-07-29T19:58:16+00:00July 29th, 2025|Governance, Risk & Compliance: GRC|

Failproof Strategies for Hospital Regulatory Compliance

When it comes to hospital regulatory compliance, no two days are ever the same. Constant change related to evolving regulations, new threats, and shifting policies is the norm, not the exception. This means hospital compliance teams must foster a culture that embraces continuous improvement and responsiveness to change. Below we offer several strategies that can support a continuous improvement mentality for the long-term, leading to ...

What is an Integrated Risk Management Process?

The integrated risk management process connects and funnels every risk area—think cybersecurity, third‑party, compliance, data privacy, and more—into one unified strategy. Instead of having each team manage threats in isolation, you assign clear accountability for each domain and agree on a common set of definitions. Visibility, check. Accountability, check. A more holistic vantage point, check. In the not-so-distant past, companies handled risks within isolated teams, ...

How to Prove Healthcare Compliance Program Effectiveness

Can you walk the healthcare compliance walk? Regulators no longer accept activity reports as proof of success. They want hard evidence that your compliance program changes behavior and operates independently. What's next? Here are three actionable steps to improve your healthcare compliance program, as suggested by our annual survey, in partnership with Strategic Management Services, on the current state of healthcare compliance programs. Since Outcomes ...

Quantifying Reputational Risk: What GRC Leaders Need to Know

One third-party misstep can damage a brand in a matter of minutes. For example, a data breach can grant hackers access to customer data, a vendor's offensive social media post can trigger public backlash, or a logistics partner’s delay can ruin a product launch. Quantifying reputational risk is now essential. Organizations all around the world face increased pressure. Pressure to assess, monitor, and mitigate reputational ...

By |2025-07-14T14:05:40+00:00July 14th, 2025|Business Resilience, Governance, Risk & Compliance: GRC|

Expect More From Your Whistleblowing Solution

Lean teams hunting for compliance solutions face numerous challenges. Manual spreadsheets stall investigations, evidence becomes hard to pinpoint, and regulatory deadlines—like the EU Whistleblower Directive—loom large. In the meantime, executives expect immediate visibility when a compliance allegation surfaces while HR or legal, doubling as compliance, scramble to stitch data together. The result - culture confidence erodes and costs climb. This is where the right whistleblowing ...