News & Analysis as of

Compliance Risk Assessment Regulatory Requirements

Compliance programs typically refer to formalized institutional procedures within corporations and organizations to detect, prevent and respond to indvidual and widespread instances of regulatory violations. ... more +
Compliance programs typically refer to formalized institutional procedures within corporations and organizations to detect, prevent and respond to indvidual and widespread instances of regulatory violations.  In response to many corporate scandals evidencing rampant unethical business practices, many nations, including the United States, began passing strict regulatory frameworks aimed at curbing these abuses. Notable pieces of legislation in this area include the U.S. Foreign Corrupt Practices Act (FCPA), Sarbanes-Oxley (SOX), and the U.K. Bribery Act, to name a few. The foregoing statutes and the severe penalties often associated with them form the basis of many modern institutional compliance programs. less -
White & Case LLP

AI Watch: Global regulatory tracker - OECD

White & Case LLP on

The OECD's AI recommendations encourage Member States to uphold principles of trustworthy AI. Status of the AI Regulations - The Adherents have agreed to promote, implement, and adhere to the Recommendation. The Principles...more

Miles & Stockbridge P.C.

Despite Reduced Enforcement Risks, Businesses Should Invest in Corporate Compliance

Some early actions by the Trump administration have led corporate legal departments to question the extent to which they need to invest in ethics and compliance at this time, based on a perceived reduction in enforcement...more

Ankura

Generative AI Risks: Legal and Compliance Insights - Part 2

Ankura on

The Bottomline: Five Practical Steps for Generative AI Risk Management - As the first line of defense, employees within business operations must own and manage risks related to the business, including risks resulting from...more

K2 Integrity

A Collaborative Approach to Customer Risk Assessment

K2 Integrity on

Unlock a New Era of Customer Risk Assessment - Legacy customer risk rating (CRR) models—built on static KYC data and subjective judgment—are no longer sufficient in a world of dynamic threats and tightening regulatory...more

Gardner Law

From Paper to Practice: Compliance Policies that Work

Gardner Law on

In the FDA-regulated industry, a compliance program isn’t just a formality—it’s a critical tool for protecting your business, patients, and reputation. Still, too many companies treat compliance policies as static...more

Ankura

Remediation Happens: How To Identify, Mitigate and Resolve Related Risks

Ankura on

Remediation occurs for a host of reasons. You may identify remediation risk from internal activities (e.g., an audit, a control break) or external activities (e.g., a complaint, a regulatory exam, a lawsuit). Sometimes a...more

NAVEX

Preparing for the Compliance Challenges of Agentic AI

NAVEX on

Artificial intelligence keeps improving at all sorts of things – including how to challenge corporate ethics and compliance programs. Even while you may still be struggling to tame the risks of generative AI, its more...more

Mitratech Holdings, Inc

The Vendor Onboarding Process: Keys to Success

What Is Vendor Onboarding? Vendor onboarding is the process of establishing a company as an approved provider of technology, goods, or services to your organization. It’s also an essential early step in the vendor risk...more

Sheppard Mullin Richter & Hampton LLP

FedRAMP 20x – Major Overhaul Announced to Streamline the Security Authorization Process for Government Cloud Offerings

On March 24, 2025, the Federal Risk and Authorization Management Program (“FedRAMP”) announced a major overhaul of the program, which is being called “FedRAMP 20x.” The FedRAMP 20x announcement stated there are no immediate...more

NAVEX

Risk Assessment – The Most Important and Least Understood Component of an Effective GRC Program

NAVEX on

Among the many crucial elements of effective compliance initiatives (internal reporting programs, policies, procedures, training, supply chain management, M&A, and more) are risk assessments – the intended foundational...more

Ropes & Gray LLP

A Fleet of Omnibuses and Other Takeaways from Monday’s Responsible Business Alliance Conference on the CSDDD in Brussels

Ropes & Gray LLP on

On Monday, the Responsible Business Alliance hosted a stellar event in Brussels, Driving Effective Due Diligence: Omnibus Unpacked. This waitlisted, standing room-only event – co-hosted with the European People’s Party,...more

The Volkov Law Group

Riding the Wave to Navigate Volatile Risks

The Volkov Law Group on

Chief compliance officers are adjusting a new, risk world, where top risks include export controls, sanctions, and immigration enforcement. At the same time, some risks remain — third-party risks, conflict of interest, fair...more

Thomas Fox - Compliance Evangelist

Compliance Tip of the Day: Superforecasting

Welcome to “Compliance Tip of the Day,” the podcast where we bring you daily insights and practical advice on navigating the ever-evolving landscape of compliance and regulatory requirements. Whether you’re a seasoned...more

Thomas Fox - Compliance Evangelist

Compliance Tip of the Day: The Last Mile

Welcome to “Compliance Tip of the Day,” the podcast where we bring you daily insights and practical advice on navigating the ever-evolving landscape of compliance and regulatory requirements. Whether you’re a seasoned...more

Mitratech Holdings, Inc

How to Automate Vendor Risk Management

Learn how automating third-party risk management (TPRM) can enhance efficiency, security, and compliance and help businesses proactively address vendor risks....more

Bodman

Resolutions for Healthcare Providers: Part 2 of 2 – Compliance Plans, Risk Assessments, and Improved Workflows

Bodman on

As the new year continues, it is useful to review your practice’s processes and policies to ensure that the practice operates with efficiency and remains compliant with ever-changing healthcare regulations....more

Dentons

Ep. 51 – Building Effective Compliance Committee Agendas

Dentons on

Many healthcare organizations understand the importance of having a Compliance Committee but some struggle to use their committee effectively. The key to ensuring the Compliance Committee is effective is building smart...more

Lowenstein Sandler LLP

Top AI Risks General Counsels Should Address

Lowenstein Sandler LLP on

Considering the rapid development and deployment of artificial intelligence (AI) in a wide array of applications and business sectors, it can be a daunting task for a company’s General Counsel (GC) to keep pace in identifying...more

Akin Gump Strauss Hauer & Feld LLP

Preparing Organisations for the New UK Failure to Prevent Fraud Offence

Fraud is the most common offence in the UK, amounting to 41% of all crime.  On 26 October 2023, the UK’s long-awaited Economic Crime and Corporate Transparency Act 20232  (the Act) received Royal Assent, setting out...more

A&O Shearman

European Commission rejects draft technical standards on sub-contracting ICT services under Digital Operational Resilience Act

A&O Shearman on

The European Commission has published a letter (dated 21 January 2025) addressed to the Joint Committee of the European Supervisory Authorities (ESAs) rejecting certain draft regulatory technical standards (RTS) the ESAs...more

Braumiller Law Group, PLLC

Braumiller Law Group - February 2025 Newsletter

The United States-Mexico-Canada Agreement (USMCA) joint review process is scheduled to begin on July 1, 2026, but the time to prepare is now. Embedded trade compliance professionals should already be doing scenario...more

Ankura

The Power of Data Analytics: Unlocking the DOJ’s 2024 Compliance Guidance

Ankura on

How do compliance teams in major corporates keep pace with the exponential growth of company data and the wealth of regulation they face? And in the face of this, how do they maintain an effective compliance programme robust...more

Goodwin

AML/CTF Asset Due Diligence Obligations: CSSF Provides Clarifications in an initial Q&A

Goodwin on

On 13 December 2024, the Commission de Surveillance du Secteur Financier (CSSF) published the first FAQ to assist professionals in the investment sector supervised, authorised, or registered by the CSSF in complying with...more

Ankura

Enhancing Cross-Border e-Discovery and Data Breach Investigations with AI

Ankura on

Today’s interconnected world presents significant challenges for managing cross-border e-discovery and data breach investigations. These processes—critical for legal proceedings and cybersecurity—are often complicated by...more

Stoel Rives LLP

New 2025 EPA Risk Management Rules on TCE, PCE, and CTC

Stoel Rives LLP on

The U.S. Environmental Protection Agency (“EPA”) recently enacted further restrictions for three chlorinated solvents – trichloroethylene (“TCE”), perchloroethylene (“PCE”) and carbon tetrachloride (“CTC”).  On December 17...more

87 Results
 / 
View per page
Page: of 4

"My best business intelligence, in one easy email…"

Your first step to building a free, personalized, morning email brief covering pertinent authors and topics on JD Supra:
*By using the service, you signify your acceptance of JD Supra's Privacy Policy.
- hide
- hide