Risk & Compliance Matters

The CSDDD has faced a rollercoaster of revisions over the past two years. The latest changes have been approved by the European Parliament’s Legal Affairs Committee.

Corporations have struggled to manage cybersecurity risk for years, and now they have a new tool to help them bring order to chaos: a new and improved cybersecurity risk management framework, released at the end of February by the National Institute of Standards and Technology.

For HR and Compliance professionals, ensuring employees have access to the knowledge they need to stay on the right path and aligned with your company values and protocols is paramount. This article discusses common challenges in keeping your workforce engaged with compliance.

2024 is shaping up to be a very active year for regulatory and enforcement developments in the healthcare industry. This post, the second in a three-part series, will cover the increased cybersecurity expectations for the healthcare industry.

Compliance with the EU’s General Data Protection Regulation has long been a complicated, arduous task, but compliance officers can always start with one universal driver: your company’s GDPR risk keeps going up.

Each year, NAVEX releases the Top 10 Trends in Risk and Compliance eBook. This post is one of the articles, " Leveraging Compliance Data for More Effective Decision Making and Business Resiliency.”

2024 is shaping up to be a very active year for regulatory and enforcement developments in the healthcare industry. This post, the first in a three-part series, will cover the increase in enforcement action for the healthcare industry.

The U.S. Supreme Court recently paved an easier path for whistleblowers to win retaliation lawsuits they file, making the always delicate task of handling corporate whistleblowers that much more delicate.

Each year, NAVEX releases the Top 10 Trends in Risk and Compliance eBook. This post is one of the articles, " How to Meet the Letter, Spirit and Intent of the DOJ’s Evolving Compliance Program Expectations.”

Each year, NAVEX releases the Top 10 Trends in Risk and Compliance eBook. This post is one of the articles, " Risk & Compliance as a Strategic Imperative for the Board.”

What exactly is the Brussels Effect, and why should risk and compliance leaders care? This article explores how the EU regulations have a global influence, and how compliance officers benefit from looking to the EU to anticipate the future of compliance.

Risk assessments are one of the most important tasks a compliance officer performs – and also one of the most confounding. How do you keep assessing your organization’s risks in a disciplined, methodical manner, when the range and nature of those risks changes so often?

The option to report a workplace concern anonymously is a foundational part of a healthy ethics and compliance program. This article discusses best practices in hotline and incident management success and tips to improve the quality of and follow-up for anonymous reports.