Blog
When Annual Assurance Is Not Enough: The Case for Continuous Control Confidence
For many firms, assurance still follows a familiar rhythm, with controls tested, risks assessed, audit plans delivered, issues reported and remediation tracked. Boards and senior
Beyond Supplier Risk: Governing the Dependencies That Matter Most
For many firms, third-party risk has traditionally sat somewhere between procurement, outsourcing oversight and information security. A supplier is assessed before appointment. A contract is
Risk intelligence – the missing ingredient in every risk management framework and programme
Most risk and compliance functions work with enormous amounts of data, but very few work with and have access to relevant intelligence. But, you may
When AI Agents Start Acting: Why Autonomy Is the Next Governance Risk
Over the last few weeks, we’ve looked at two related questions. The first was what happens when an AI model goes down. As firms embed
What are our “top risks”?
How often has an executive, or the risk committee or the board requested that the risk function present to them the “top risks” for the
