SAI360 Announces Acquisition of Plural Policy

Amid Cyber Breaches, Operational Safety Saves the Day

When ransomware halts production lines and phishing attacks cripple control systems, cybersecurity alone isn’t enough. It's merely a start. What's next? Organizations need operational safety as their last line of defense. Operational safety ensures that people, processes, and equipment alike keep running effectively and efficiently, even under attack. From regulatory shocks to climate events to supply-chain failures, operational safety protocols shore up continuity when IT ...

By |2025-07-01T18:29:34+00:00June 24th, 2025|Governance, Risk & Compliance: GRC|

Best Practices for Managing Operational Risk

A single IT outage doesn’t just interrupt operations. In many cases, it becomes front-page news. In July 2024, CrowdStrike served as a wake-up call when a software glitch caused the largest IT outage in history, disrupting business operations around the world. In early 2025, Barclays customers took to social media as a 14-hour outage left them locked out of their accounts. These incidents have more ...

How to Streamline Third-Party Compliance Training

When it comes to data breaches, hackers, supply chain snafus, and bad actors getting hold of your organization's most critical data, knowledge is power. Ignoring third‑party compliance training invites audits and fines. Consider the recent data breach involving PowerSchool that involved a costly ransom and sparked multiple class action lawsuits. Did you know? Healthcare is the industry most impacted by third-party breaches. Forty-one percent ...

By |2025-06-05T15:40:14+00:00June 3rd, 2025|Ethics & Compliance Learning|

2025 Global Regulatory Changes to Watch: ESG, AI, Cybersecurity & More

Global regulations are evolving—and before our very eyes. But it’s not just the volume of regulatory changes that matters. It’s the new direction changes may be headed and the need to keep up. Across global markets, a greater shift is taking hold. Compliance is now operating like a mirror, becoming a clear reflection of corporate values, ethics, and long-term resilience. In 2025, a new wave ...

By |2025-04-28T03:08:23+00:00April 14th, 2025|Compliance, Governance, Risk & Compliance: GRC|

3 Reasons You Should Add Emerging Risk Detection to Your GRC Strategy

Business risks. They’re everywhere and not always in places you’d expect. A sudden natural disaster can impact a key supplier. A third-party’s technical glitch can halt your production line. In some scenarios, like a disruptive new technology, an entire industry can be left scrambling. These unforeseen events often escalate quickly, create significant operational disruptions, and may result in financial loss or reputational damage. In light ...

By |2025-09-10T13:09:35+00:00April 3rd, 2025|Governance, Risk & Compliance: GRC|

10 Innovations Shaping the Future of Compliance and Learning

At SAI360’s CustomerConnect Chicago event, industry leaders and forward-thinking professionals came together to explore the intersection of compliance and learning and discuss the cutting-edge advancements shaping both of these fields. A siloed approach to risk management is no longer the solution. What is? With compliance playing a critical role in navigating risks and maintaining organizational integrity and operational resilience, GRC-learning integration is revolutionizing how teams learn, ...

How Are HIPAA Breaches Detected? How Healthcare Organizations Catch Privacy Violations

HIPAA compliance remains a critical focus for healthcare organizations. But how are most HIPAA breaches detected? Our 4th Annual HIPAA Compliance Survey reveals that employee violation reporting remains the primary detection method. However, relying solely on staff to identify breaches may not be enough to protect sensitive patient data and ensure regulatory compliance. HIPAA Privacy Programs: New Compliance Trends to Know Below, we analyze a ...

By |2025-11-21T14:50:19+00:00March 24th, 2025|Governance, Risk & Compliance: GRC, Healthcare GRC|

Going Beyond the Checklist: SAI360’s Holistic Approach to Cyber Risk Compliance Management

Data protection and security compliance aren’t just about meeting requirements. It’s about maintaining resilience amid evolving risks. Organizations need an integrated risk management approach that connects related areas of risk like IT risk, third-party risk, and regulatory risk with policy management and business continuity tools as part of a cohesive strategy.    Did you know? Global cybersecurity training is expected to hit $10 billion by 2027. ...

Three Things GRC and Training Leaders are Talking About: CustomerConnect Chicago Recap

As risk landscapes grow more intricate and regulatory demands intensify, outdated, siloed approaches to ethics, governance, risk, and compliance (GRC) can no longer keep up. Organizations need adaptive, integrated strategies to stay resilient. At SAI360’s CustomerConnect event in Chicago, GRC and Ethics & Compliance professionals gathered over two days in November to discuss these challenges openly. One of several global events recently hosted by SAI360, ...

By |2025-04-28T02:59:01+00:00November 14th, 2024|Ethics & Compliance Learning, Governance, Risk & Compliance: GRC|

Six Months Out: Cybersecurity Expert Robert Bond’s Predictions on Generative AI Regulations and Risks

As artificial intelligence (AI) continues to advance, regulatory frameworks are evolving in the blink of an eye across the globe. Both Europe and Canada, for example, are arguably at the forefront of shaping AI governance, each focusing on addressing AI's greatest ethical risks. For example, consider the EU AI Act, which is set to roll out fully in the coming months. This is designed to foster trust ...

By |2025-04-28T02:58:13+00:00October 22nd, 2024|Governance, Risk & Compliance: GRC, IT Risk & Cybersecurity|