Compliance As Code
Let me guess… Somewhere in your organization right now, there’s a folder called: “Final_Final_Audit_THIS_ONE_REAL.zip” And inside? A beautiful collection of screenshots… from six months ago…That...
Security Compliance Stuck… or Just Not Starting?
If you’re building a new security compliance program, or trying to restart one that stalled somewhere along the way, this will probably sound familiar. You run an assessment, identify the gaps,...
SOC 2 Isn’t Keeping Up
I don’t think SOC 2 is dying, but I do think it’s behind. I hear updates are coming for AI, but will it be enough - and soon enough? Heck, we've been waiting on zero trust requirements for a while...
The Real Reason Compliance Efforts Stall
Through my many years workingin GRC, I've found a consistent theme: Most compliance projects don’t fail - they stall. And they can be for a long while at times. I see this constantly across SOC 2,...
Employee Turnover Isn’t an HR Problem — It’s a Risk Management Problem
Let’s talk about turnover the way executives actually experience it. When someone leaves, it doesn’t feel like an “HR issue.” It feels like things start breaking. Projects slow down. Decisions take...
How to Build a Culture of Compliance in Your Organization
Compliance is often viewed as a restrictive set of rules enforced by a single department. This narrow perspective not only hinders business agility but also leaves an organization vulnerable to...
The Future of GRC: Trends to Watch in 2026
For Chief Information Officers (CIOs) and Chief Information Security Officers (CISOs), understanding these shifts is critical. Navigating new regulations, managing emerging threats, and aligning GRC...
AI in Risk Management: Opportunities and Challenges
Artificial intelligence is fundamentally reshaping how organizations approach risk management. The days of relying on periodic assessments and purely reactive, manual processes are numbered. Today,...
Business Associates Who Need to Become HIPAA Compliant
The landscape for HIPAA Business Associates is undergoing its most significant transformation in over a decade. As the U.S. Department of Health and Human Services (HHS) doubles down on...
The Role of GRC in Business Strategy
Aligning governance, risk, and compliance with business objectives enhances resilience and success. In today's fast-paced business environment, organizations face increasing complexity due to...
9 AI Risks to Navigate: A Practical Guide to Keeping Things on Track
Artificial Intelligence (AI) is popping up everywhere, from your phone apps to big business tools. It’s pretty impressive, but let's be real: it’s not perfect. There are risks, and if you’re not...
ISO 27001 vs. NIST: Which Framework is Right for Your Organization?
As cybersecurity threats evolve, organizations must adopt robust security frameworks to protect their sensitive data, ensure regulatory compliance, and mitigate risks. Two of the most widely...
A Comprehensive Guide to Keeping Kids Safe Online
The internet has opened up endless opportunities for learning and entertainment, but it also comes with risks that can impact your child’s safety. As a parent or guardian, it’s crucial to understand...
Why are Security and Compliance So Important?
I often get asked about Security and Compliance. They are often used interchangeably, and they are often not given the appropriate attention or priority. Everyone seems to know that they are...
8 Takeaways from IBM’s Cost of a Data Breach Report (2024)
I look for this report every year. It's not only interesting, but highly valuable. IBM’s annual Cost of a Data Breach Report gives IT, risk management, and security/compliance leaders important...