Upcoming Events . . .

Latest Pontifications & Thoughts . . .

  • Have You Hugged Your CECO/CCO Today?

    Today is the official National Compliance Officer today! This is a very challenging role in organizations and one that is in the midst of a lot of change. Below is… Continue reading Have You Hugged Your CECO/CCO Today?

  • 5 Reasons to be Happy About UK SMCR

    5 Reasons to be Happy About UK SMCR

    Regulation and oversight – what a burden to business. That is the common expression financial services firms have as they respond to 220 regulatory change events around the world every… Continue reading 5 Reasons to be Happy About UK SMCR

  • Navigating Chaos

    Navigating Chaos

    Below is Michael Rasmussen’s article found in the Autumn 2019 issue of Enterprise Risk, published by the Institute of Risk Management (The IRM). The physicist Fritjof Capra once said, β€œThe… Continue reading Navigating Chaos

  • The 3 Lifecycle Stages of Vendor Security Risk Management: Ongoing Monitoring

    The 3 Lifecycle Stages of Vendor Security Risk Management: Ongoing Monitoring

    This is the second of a three-part series on vendor risk management through the lifecycle of the relationship. Today, we focus on the ongoing monitoring process. Too often organizations conduct… Continue reading The 3 Lifecycle Stages of Vendor Security Risk Management: Ongoing Monitoring

  • The 3 Lifecycle Stages of Vendor Security Risk Management: Onboarding

    The 3 Lifecycle Stages of Vendor Security Risk Management: Onboarding

    This is the first of a three-part series on vendor risk management through the lifecycle of the relationship. Today, we focus on steps to achieve a proper and friction-free onboarding… Continue reading The 3 Lifecycle Stages of Vendor Security Risk Management: Onboarding

  • Compliance Disclosure Solutions: Separating the Simple from the Advanced

    Compliance Disclosure Solutions: Separating the Simple from the Advanced

    GRC 20/20 is seeing a growing demand for compliance management technologies from the Corporate Compliance and Ethics department (e.g., Chief Ethics and Compliance Officer, Chief Compliance Officer). This demand spans… Continue reading Compliance Disclosure Solutions: Separating the Simple from the Advanced

  • Understanding Third Party GRC Maturity: Defined Stage

    Understanding Third Party GRC Maturity: Defined Stage

    A haphazard department and document centric approach for third party GRC compounds the problem and does not solve it. It is time for organizations to step back and mature their… Continue reading Understanding Third Party GRC Maturity: Defined Stage

  • Policy & Training Engagement in a Millennial Generation

    Policy & Training Engagement in a Millennial Generation

    As the only analyst covering the range of policy and training management solutions as its own segment of the Governance, Risk Management, and Compliance (GRC) market, I am asked several… Continue reading Policy & Training Engagement in a Millennial Generation

  • The Rhythm of Risk: Managing Risk Throughout the Context of Business

    The Rhythm of Risk: Managing Risk Throughout the Context of Business

    Writing about risk management is like trying to have an intelligent conversation today about religion or politics. Individuals in the risk management community have polarized views and if someone does… Continue reading The Rhythm of Risk: Managing Risk Throughout the Context of Business

  • Understanding Third Party GRC Maturity: Fragmented Stage

    Understanding Third Party GRC Maturity: Fragmented Stage

    A haphazard department and document centric approach for third party GRC compounds the problem and does not solve it. It is time for organizations to step back and mature their… Continue reading Understanding Third Party GRC Maturity: Fragmented Stage

  • Policy Management Tips for Companies in Asia

    Policy Management Tips for Companies in Asia

    On 30th July, ClauseMatch hosted a Policy Management Workshop with Governance, Risk & Compliance (GRC) expert Michael Rasmussen in Singapore, the first in our global series that aim to provide a blueprint for attendees… Continue reading Policy Management Tips for Companies in Asia

  • Understanding Third Party GRC Maturity: Ad Hoc Stage

    Understanding Third Party GRC Maturity: Ad Hoc Stage

    A haphazard department and document centric approach for third party GRC compounds the problem and does not solve it. It is time for organizations to step back and mature their… Continue reading Understanding Third Party GRC Maturity: Ad Hoc Stage