Latest Publications

Share:

Using the NIST CSF for Strong Cybersecurity Compliance

Corporations have struggled to manage cybersecurity risk for years, and now they have a new tool to help them bring order to chaos: a new and improved cybersecurity risk management framework, released at the end of February...more

Supreme Court Gives a Boost to Whistleblowers

The U.S. Supreme Court recently gave whistleblowers an easier path to win retaliation lawsuits they file, making the always delicate task of handling corporate whistleblowers that much more delicate. Compliance and HR teams...more

Artificial Intelligence – The Good, The Bad… The Future

The rise of artificial intelligence – and specifically of generative AI, which can create entirely new images, sounds, and text with just a few prompts – was the most important technology development of this decade. The...more

How to Build a Good Risk Assessment Process

Risk assessments are one of the most important tasks a compliance officer performs – and also one of the most confounding. How do you keep assessing your organization’s risks in a disciplined, methodical manner, when the...more

You Don’t Need New Regulation to Have AI Enforcement Risk

One year ago, compliance officers began 2023 dazzled by the potential of artificial intelligence, and braced for new regulations to govern how corporate organizations use AI. Then a funny thing happened: governments didn’t...more

SEC Rule or Not, Keep Your Eye on the Climate Change Ball

The U.S. Securities and Exchange Commission recently announced that its long-awaited greenhouse gas disclosure rule will be delayed yet again, most likely until April 2024. This raises an important question for compliance and...more

From Healthcare Sector, a Big Push for CCO Autonomy

For the better part of a decade, the U.S. Justice Department has led the way on calls for a strong, independent corporate compliance function – until recently, that is. Then the Department of Health and Human Services leaped...more

The Subtle but Significant Shift at U.S. Justice Department

In October, deputy attorney general Lisa Monaco made headlines when she announced a new leniency policy at the U.S. Justice Department for companies that disclose compliance violations discovered during mergers and...more

The Path from CISO to Board Director

Everyone even peripherally involved with corporate governance, compliance, or risk management knows that corporate boards need more CISOs to help them navigate today’s cyber-saturated world. Even better, plenty of CISOs are...more

Whistleblower Hotline Success, in the EU and Beyond

For the last several weeks I have been working with NAVEX to research whistleblower protection laws across Europe. Meanwhile, several benchmarking surveys about corporate compliance programs have arrived lately, with some...more

Why a ‘Policy on Policies’ Is So Important

Don’t faint from surprise at this news, but corporate compliance is a world with lots of lingo that can be difficult to understand. Case in point: a “policy about policies” – something that sounds obscure, but actually is one...more

The SEC Wants You to Do Better at Disclosing Cybersecurity Breaches

Compliance and technology executives, we need to talk. Or, more accurately, you need to talk more often – to each other. In the last 18 months, the Securities and Exchange Commission sanctioned three companies for making...more

New Expectations of Executive Leadership – How Will You Prove and Certify Your Program Works?

As compliance officers enter 2023, they need to learn how to handle a double-edged sword: the Justice Department’s new requirement that as part of corporate misconduct resolutions, CCOs must certify the effectiveness of their...more

How CISOs Can Start Talking About ChatGPT

ChatGPT really is a marvelous technology – an artificial intelligence designed to answer just about any question a person might ask it – and yet, somehow, it leaves CISOs and compliance officers with even more questions....more

[Webinar] Master Class Series: Eliminating Toxic Cultures - March 2nd, 8:00 am - 11:00 am PT

Workplace cultures that prioritize learning and consistently strive to eliminate harassment and retaliation do not happen overnight. It takes continuous and proactive effort to ensure employees feel safe and respected....more

Good Information Protection Programs Coming into Focus

Corporate compliance officers grapple all the time with what their companies should do to develop effective information protection programs. Thankfully the Federal Trade Commission has given us two recent enforcement actions...more

The Compliance Program’s Role in Anti-Fraud Efforts

Corporate compliance professionals can learn a lot from the audit world. Our latest lesson comes in a statement from the Securities and Exchange Commission, warning auditors to do better at identifying the risk of fraud among...more

42 Results
 / 
View per page
Page: of 2

"My best business intelligence, in one easy email…"

Your first step to building a free, personalized, morning email brief covering pertinent authors and topics on JD Supra:
*By using the service, you signify your acceptance of JD Supra's Privacy Policy.
- hide
- hide