A healthy organization depends on more than policies and procedures. It also depends on whether people feel they can raise a concern without being ignored, discredited, or labeled as difficult. Employees who are close to day-to-day operations are often the first to identify situ…

By Andy Mura Ask any incident responder about their worst night on call, and you will hear a story about time. The minutes lost confirming whether an alert was real. The hours spent paging the right people. The days between the first foothold and the moment someone finally said the word “breach�…

The hidden risk of Level 1 alert fatigue In banking and financial services, sanctions screening is reaching a critical inflection point. Level 1 (L1) teams face an overwhelming volume of alerts where, s. While often treated as a mere capacity constraint, chronic alert overlo…

When a serious allegation surfaces (whether through a whistleblower complaint, an internal audit finding, or a regulatory query), the Board of Directors and/or Audit Committee face a set of decisions that must be made quickly and correctly. Who investigates? Who oversees the invest…

A vacant governance role does not usually look like a compliance problem. Meetings continue. Papers go out. Filings are made. Someone takes the minutes, someone else follows up the actions, and legal or compliance colleagues cover anything urgent. On the surface, the organization m…

Media promotions and live events are a central component of modern-day marketing and advertising strategies. The need for brands and entertainment organizations to seek authentic consumer engagement has increased. From influencer-driven promotion and experiential campaigns to tic…

, Co-Founder & CEO of Regulativ.ai On 17 January 2025, DORA entered into application across the EU, closing two years of preparation that left most financial entities still working through what compliance required. Over a year later, many of those same teams manage record volumes of …

By SCCE & HCCA in partnership with Moody’s AI, changing regulations, and new business models are reshaping compliance programs, data analytics, and third-party risk management. More than half of the compliance professionals responding to Moody’s 2025 survey, “From reactive to proactive: How…

This spring, 50 compliance professionals were selected to participate in the SCCE/FBI Corporate Compliance Professional Outreach Event, a unique two-day experience designed to strengthen the relationship between compliance professionals and federal law enforcement. Hosted at FBI Headquarters in Wash…

By the time a fraud investigator walks into an organization, the money is usually gone. Wire transfers move within hours. Funds are routed through two or three intermediary accounts before the victim has finished their first call with the bank. What the investigator spends most of …

Most compliance teams are still running annual audits and calling it governance. But your security controls do not wait for audit season to fail. The average cost of a data breach in 2025 is USD 4.44 million globally. A big part of that cost comes down to timing—organizations a…

I’ve worked with compliance teams that passed every audit, maintained clean documentation, and still felt unsure about their real risk exposure. That disconnect shows up more often than we admit. In fact, 68% of organizations have experienced breaches through third-party risks,…

Nothing happens. That sounds like a criticism. It isn’t. Some of the most important decisions I’ve been involved in or helped take to fruition left almost no trace. A vendor due diligence process that quietly stopped. A key hire that didn’t go ahead…

One hundred customers. Their highly sensitive information, including full names and business addresses, email addresses and phone numbers, Social Security numbers, and dates of birth. All remained exposed for 6 months (July–Dec 2025). Now, th…

Let’s talk about the F-word that makes compliance professionals more uncomfortable than a surprise DOJ inquiry: feedback. You’d rather sit through a four-hour records retention training than tell your deputy compliance officer that their investigation memos read like they were …

Recent international reporting and policy analysis highlight the increasing relevance of digital financial systems in the context of serious and organized crime, including human trafficking. As illicit activities rely more heavily on digital infrastructures, financial syste…

The U.S. Department of Justice’s guidance on evaluating corporate compliance programs underscores the critical role of data retention policies in demonstrating program effectiveness. Yet many Chief Compliance Officers only realize the impact of poor retention prac…

Michael Savicki, Senior Vice President and Chief Risk & Compliance Officer at American Express Global Business Travel (Amex GBT), best known as Amex GBT, knows the challenges and opportunities in merger’s and acquisitions. The company  recently completed the acquisition of CWT…

Neurodiversity tends to be spoken of as an issue to be recognized and, quite often, as a barrier to overcome. Katie Roemer, Vice President, Compliance & Privacy Officer at Alta Hospital Systems see it differently: as an asset to your compliance team. In this podcast she points ou…

By  Adam Turteltaub Listen up people:  It’s all about the people. That’s the key message from Gabor Sulyok, Global Head of Commercial and Healthcare Compliance at BioNTech and experienced senior compliance counsel Luciane Mallmann. At its core, ethics and compliance is a human endeavor. While …