News & Analysis as of

Third-Party Risk

NYDFS Updates FAQs to Clarify Cybersecurity Regulations

by Ballard Spahr LLP on

The New York Department of Financial Services (NYDFS) recently updated frequently asked questions (FAQs) about its cybersecurity regulations, 23 NYCRR 500, to address four new issues. NYDFS published its initial set of FAQs...more

New OCC Bulletin on Third-Party Oversight Highlights Fintech Relationships

by Pepper Hamilton LLP on

On June 7, the Office of the Comptroller of the Currency (OCC) issued OCC Bulletin 2017-21 (Frequently Asked Questions to Supplement Bulletin 2013-29; Third-Party Relationships: Risk Management Guidance). This is the OCC’s...more

FCPA COMPLIANCE REPORT-EPISODE 337, JAMES GELLERT ON ASSESSING 3RD PARTY FINANCIAL HEALTH FOR COMPLIANCE

by Thomas Fox on

In this episode, I visit with James Gellert, CEO of RapidRatings, a company which uses a financial dialogue to determine third party supplier health and viability. Gellert explains what supply chain resilience is and how...more

Keeping Your Airline IT Resilient - In light of new IT threats, airlines should revisit their BCDR arrangements

A number of major carriers have suffered high-impact IT events in the past several months. Estimates of losses in these cases have exceeded £100m. This is on top of (no doubt significant) remedial costs, reductions in share...more

From Bottom Bunk to Top Mind

I recently had the honor of being named to Compliance Week’s list of Top Minds for 2017, earning the title of “The Great Communicator” from Bill Coffin, Donna Rice, and the CW team....more

New Safe Harbor Requirement to Maintain Immunity from Copyright Infringement

by Stinson Leonard Street on

Online Service Providers Re-File Your DMCA Agent Designations to Prevent Expiration - If your company has a website that allows third parties to post any kind of content (text, pictures or video), then it may be liable...more

Third-Party Data Breaches: Weakest Link in Cybersecurity

by Revision Legal on

One problem that many companies discover as they develop cybersecurity measures is that third-party data breaches is the weakest link in its data management chain. Many companies find it a business necessity to outsource...more

Corporate News - May 2017

by Hogan Lovells on

Corporate governance – 4MLD and changes to the PSC regime - Companies House recently published its business plan for 2017-18, its strategic plan for 2017-2020 and a press release with details of additional anti-money...more

Advertising Litigation Report: Vol. 2, No. 2 - National Advertising Division (NAD) and National Advertising Review Board (NARB)

The Colgate-Palmolive Company (Tom’s of Maine “Naturally Dry” Antiperspirant), NARB Panel Report No. 215 (Jan. 25, 2017) - A National Advertising Review Board (NARB) panel determined that the National Advertising...more

Advertising Litigation Report: Vol. 2, No. 2 - National Advertising Division (NAD) and National Advertising Review Board (NARB)

The Colgate-Palmolive Company (Tom’s of Maine “Naturally Dry” Antiperspirant), NARB Panel Report No. 215 (Jan. 25, 2017) - A National Advertising Review Board (NARB) panel determined that the National Advertising...more

Real Answers to Common Questions on Cybersecurity

by NAVEX Global on

Q: In my company, the IT directors see cybersecurity as an IT and software issue to be solved with software and hardware. How do I convince the team that employees need to also be trained on risky behavior – something that...more

Expect Focus - Life Insurance: Risky Business, Volume I, March 2017

by Carlton Fields on

Regulators Demand Third-Party Risk Management - While third-party risk management has been a required component of an effective enterprise risk management program for many years, the topic is receiving elevated...more

Regulators Demand Third-Party Risk Management

by Carlton Fields on

While third-party risk management has been a required component of an effective enterprise risk management program for many years, the topic is receiving elevated attention at insurance companies and related businesses....more

2017 EMEA & APAC Culture and Compliance Benchmark Report - Data And Insights To Put To Work In Your Programme Today

by NAVEX Global on

NAVEX Global partnered with an independent research agency to investigate how companies headquartered across Europe, Middle East and Africa (EMEA) and Asia Pacific (APAC) develop and execute their ethics and compliance (E&C)...more

The Customer Is (Not) Always Right: An Employer's Duty to Protect

by Lewitt Hackman on

Everyone is entitled to their opinion, and in this political climate, it seems as though more people are comfortable voicing those opinions, even if they may offend someone. Although free speech is a primary pillar of...more

How to Measure Third-Party Risk Management ROI

by Thomas Fox on

One area that has bedeviled Chief Compliance Officers (CCOs) and compliance practitioners is how to determine the return on investment (ROI) for your compliance program regarding the management of third parties. While it is...more

DOJ’s Compliance Program Evaluation: Risk Assessment, Policies and Procedures and Third-Party Risk Management (Part III of IV)

by Michael Volkov on

To design and implement an effective ethics and compliance program, companies have to conduct a risk assessment and tailor its policies and programs to its risk profile. DOJ’s Compliance Evaluation reinforces this framework...more

New Guidance from the DOJ on Your Compliance Program

by NAVEX Global on

The U.S. Department of Justice (DOJ), Criminal Division, Fraud Section, recently released new guidance associated with its Guide to the U.S. Foreign Corrupt Practices Act. The guidance, entitled Evaluation of Corporate...more

Cybersecurity Threats for Treasury & Payment Management Systems Report Released

Pactera Technologies N.A., Inc. [www.Pactera.com] has released the report “Cybersecurity Threats for Treasury & Payment Management Systems: Six Things you Should Know to Manage Them.” It is easy to understand and pertinent,...more

Vendor Management Programs – Putting Together Your Dream Team

by Zelle LLP on

Insurance professionals are the recipients of added pressures to streamline processes in an effort to maximize results. Nowhere is this more palpable than in Latin American where the way “it is has always been done”...more

Risk in Compliance Week: Part II – Risk Assessments

by Thomas Fox on

I continue my exploration of risk in compliance by focusing today on risk assessments. However, before we get there, I wanted to pay tribute to one of the most well-known characters from television, Della Street, who was...more

Judged by the Company You Keep

by NAVEX Global on

Earlier this month news broke that the venerable British automaker Rolls-Royce had settled an international prosecution alleging that the company’s third-party intermediaries bribed local officials in Asia. The company agreed...more

FCPA Recidivists: Zimmer Biomet (Part I of II)

by Michael Volkov on

The drug and medical device industries have been taking it on the FCPA chin for years. The risk factors in the international marketplace are significant – healthcare professionals are normally government employees; government...more

Trends from 2016 Record FCPA Enforcement Year (Part II of III)

by Michael Volkov on

No matter how you cut it – this was a big year in FCPA enforcement. Not just because of the large enforcement actions but the scope and depth of enforcement, remediation and compliance program demands....more

Being the “Necessary Evil” is so 2016: It’s Time for Ethics & Compliance to Rebrand Itself

by NAVEX Global on

As part of our culture assessments, NAVEX Global’s Advisory Services team has led more than 1,300 in-person focus groups with employees at all levels, in many countries and from every industry. We’ve heard candid comments...more

215 Results
|
View per page
Page: of 9
Cybersecurity

"My best business intelligence,
in one easy email…"

Your first step to building a free, personalized, morning email brief covering pertinent authors and topics on JD Supra:
Sign up using*

Already signed up? Log in here

*By using the service, you signify your acceptance of JD Supra's Privacy Policy.
*With LinkedIn, you don't need to create a separate login to manage your free JD Supra account, and we can make suggestions based on your needs and interests. We will not post anything on LinkedIn in your name. Or, sign up using your email address.