A NAVEX blog covering all things governance, risk and compliance related - including the latest regulatory updates you need to know.
Latest
19 Dec 2025 NAVEX Editorial Team
For SMBs, GRC maturity is built through structure, consistency and purpose. Explore five practical steps to strengthen governance, risk and compliance programs.
Learn more
Featured
Featured
Featured
19 Apr 2023 Jaclyn Jaeger
Third parties have posed significant risks to companies for years, but perhaps more so now than ever before. Cyber threats, Russia sanctions, and a new wave of child labor in the United States are just a few risks making headlines and driving the need for companies to reassess their third-party due diligence programs.
Read more
17 Apr 2023 A.G. Lambert
Each year, NAVEX publishes the Top 10 Trends in Risk and Compliance. This publication features trends and predictions for the year to come and features contributions from experts in the industry. This article discusses the importance of consolidating and effectively using data to increase efficiency and make better-informed business decisions.
Read more
14 Apr 2023 Linda Meikle
Each year, NAVEX produces the Hotline & Incident Management Benchmark Report – a comprehensive assessment of trends in whistleblowing. This post explores one of the key findings from this year’s report: reporting is at the highest levels ever, but reporters are proceeding with more caution and, in some cases, reporting outside their organizations.
Read more
10 Apr 2023 Charlotte Emerson
This NAVEX blog discusses the increasing global whistleblowing regulations and policies.
Read more
3 Apr 2023 Matt Kelly
Each year, NAVEX publishes the Top 10 Trends in Risk and Compliance. This publication features trends and predictions for the year to come and features contributions from experts in the industry. This article discusses the new expectations of executive leadership in certifying that compliance programs work in practice.
Read more
31 Mar 2023 Ingrid Fredeen
Each year, NAVEX publishes the Top 10 Trends in Risk and Compliance. This publication features trends and predictions for the year to come and features contributions from experts in the industry. This article discusses why Learning and Development should join forces with Compliance to create impactful learning initiatives.
Read more
29 Mar 2023 Jan Stappers
This NAVEX blog summarizes the February NAVEX EU Whistleblower Protection Directive: Latest News webinar and looks at the new requirements of the Netherlands Whistleblower Protection Act.
Read more
28 Mar 2023 Matt Kelly
This blog discusses recent updated guidance from the U.S. DOJ and the new policies regarding compensation clawbacks and expectations around company governance of “ephemeral messaging apps.”
Read more
27 Mar 2023 Eric Gneckow
Featuring an array of new and refined metrics, the world’s premier hotline benchmarking event – NAVEX’s 2023 Hotline & Incident Management Report and webinar – goes live on March 28, 2023.
Read more
23 Mar 2023 Scott Moritz
Fixing the problem. Such a simple statement. When it comes to compliance remediation, it can be difficult to know where to begin. This post explores what happens in the aftermath of an investigation when compliance problems are identified.
Read more
21 Mar 2023 Cherelle Johannes
On February 23 2022, the European Commission published the Corporate Sustainability Due Diligence proposal Directive which requires both EU, and non-EU companies operating within the EU, to take responsibility for their environmental and social impact. Here’s what you need to know.
Read more
17 Mar 2023 Cherelle Johannes
In this blog, you’ll get our top tips on best practices to include, values you should aim to provide and other resources to explore when building your ethics, compliance and whistleblowing program.
Read more
15 Mar 2023 Matt Kelly
The rise of ChatGPT is changing the risk and compliance landscape. This NAVEX blog explores what CISOs need to know about ChatGPT’s effect on risk and compliance.
Read more
13 Mar 2023 Kristy Grant-Hart
With dozens, hundreds, or potentially thousands of third parties within your value chain, determining the human impact is no easy feat. To begin, organizations must conduct a human rights impact assessment to gain a baseline understanding. From there, how should issues and violations be addressed – with termination of the contract, or remediation of the problems?
Read more
9 Mar 2023 Scott Moritz
The U.S. Department of Justice has made clear their expectations surrounding compliance programs needing to work in practice to prevent and remediate misconduct. This post explores how you can get the most out of your hotline to ensure compliance with DOJ expectations and create a culture that values speaking up.
Read more
