SAI360 Announces Acquisition of Plural Policy

EU Deforestation Regulation Explained: How to Meet EUDR’s 2025–2026 Deadlines

The EU Deforestation Regulation (EUDR) keeps deforestation-linked commodities and products off the EU market. Enforcement begins on December 30, 2025 for medium and large companies, with micro and small companies following in December 2026.   There are seven relevant commodities covered by the EUDR (cattle, cocoa, coffee, oil palm, rubber, soya, and wood), and any products made from them must be deforestation-free and traceable to the specific ...

By |2025-10-24T19:03:48+00:00October 24th, 2025|EHS & Sustainability: EHS&S, Regulatory Compliance|

EUDR Compliance: How to Prepare for January 2026 Reporting

If you’re a medium- or large-scale enterprise and your EU supply chain touches timber and/or forest products, you’ll need to adhere to a new EU law: the EU Deforestation Regulation (EUDR/VO 2023/1115). Proposed by the EU Commission in 2024 and serving as a replacement of the EU Timber Regulation (EUTR/EU 995/2010), EUDR requires companies to prove their in-scope products are deforestation-free. With forests covering ...

Evaluating Whistleblowing Hotline Providers

Whistleblowing hotline providers don’t just protect people - they protect businesses as well. When employees engage in unethical behavior like harassment, fraud, corruption, or falsifying documents, the consequences for businesses can be severe, resulting in costly fines, reputational damage, and potentially criminal charges. Whistleblowing hotlines empower employees who witness misconduct to report incidents anonymously, without fear of being reprimanded.  Choosing the wrong whistleblowing hotline solution ...

By |2025-08-21T15:04:08+00:00August 21st, 2025|Whistleblowing|

How to Prove Healthcare Compliance Program Effectiveness

Can you walk the healthcare compliance walk? Regulators no longer accept activity reports as proof of success. They want hard evidence that your compliance program changes behavior and operates independently. What's next? Here are three actionable steps to improve your healthcare compliance program, as suggested by our annual survey, in partnership with Strategic Management Services, on the current state of healthcare compliance programs. Since Outcomes ...

New DOJ FCPA Guidelines: What it Means for You

On June 9, 2025, the Department of Justice (DOJ) issued new DOJ FCPA guidelines that reshape how—and when—the Foreign Corrupt Practices Act (FCPA) will be enforced. The update follows a 180-day pause under Executive Order 14209, which directed prosecutors to stop initiating new FCPA investigations unless tied to national security, cartel activity, or competitive harm to U.S. companies. What is the FCPA? The FCPA prohibits ...

What CPS 230 Means for Your Supply Chain Security

The Australian Prudential Regulation Authority’s (APRA) CPS 230 mandates critical supply chain risk management updates. Financial institutions reliant on third-party services must pay close attention to this mandate. Why? Supply chain security breaches remain a critical issue, actually now affecting over 75% of software supply chains and involving recent high-profile incidents.   CPS 230 therefore aims to act as a shield to better safeguard organizations. To ...

By |2025-07-02T17:46:48+00:00July 2nd, 2025|Governance, Risk & Compliance: GRC, Regulatory Change|

What is Provision 29? The New UK Internal-Controls Declaration is Here

Does your risk management and internal framework really work? Some companies working in the United Kingdom will need to start proving it. Starting with accounting periods that open either on or after 1 January 2026, every company in either the FCA’s commercial companies or closed-ended investment fund categories must make a statement in its annual report confirming whether its risk management and internal control framework ...

Understanding DOJ Guidance: What’s the Impact on Corporate Compliance Programs?

The U.S. Department of Justice (DOJ) has long emphasized the importance of effective corporate compliance programs. While enforcement priorities may shift over time, the core expectations outlined in DOJ guidance remain consistent: programs must be well-designed, applied in good faith, and actually work in practice. What does that look like in real terms? First, programs must reflect the unique risks of the organization. There’s no ...

By |2025-08-15T18:59:18+00:00June 2nd, 2025|Compliance, Governance, Risk & Compliance: GRC|

Regulatory Horizon Scanning: Why It Belongs in Your Risk Toolkit 

Regulatory change continues to challenge organizations worldwide. From the UK's Digital Services Act and the EU's Cyber Resilience Act to the U.S. Corporate Transparency Act, businesses must continuously pay close attention to ongoing local and global regulations. With escalating ESG disclosure mandates, increasing AI governance, and a surge in enforcement actions, the volume of new requirements—and the speed at which they hit—is forcing companies to rethink how ...

By |2025-09-10T13:04:37+00:00April 22nd, 2025|Governance, Risk & Compliance: GRC, Regulatory Change|

How to Create an Effective Compliance Program

Ask five organizations what makes an effective compliance program, and you’ll likely get five different answers. But ask a regulator, and the picture gets a lot clearer.  Regulators are not looking for flashy training modules or one-size-fits-all policies. What they’re looking for is evidence—evidence that your compliance program is real, rooted in risk, and taken seriously across the business. Can you walk the compliance walk ...

By |2025-06-17T20:25:38+00:00April 16th, 2025|Compliance, Governance, Risk & Compliance: GRC|