Tag: NIS2
Why holding data too long could cost EU firms millions
For years, many organisations have treated storage as cheap and deletion as optional. Under European regulation that habit is turning into a compliance problem....
Njordium unites GRC and supplier risk under one roof
Njordium Cyber Group, a Swedish developer of cybersecurity and risk management software, has launched Inspect360 GRC, a platform built to give organisations an always-current...
What TPRM teams must automate and what must stay human
Third-party risk management (TPRM) processes designed for a few dozen vendors rarely decline gracefully as portfolios grow. According to a new eBook from RegTech...
Stale risk registers leave EU firms exposed to regulators
For EU-regulated firms, managing technology risk is no longer just sound practice. Under DORA, NIS2 and ISO 27001, it is a legal or contractual...
Why ‘compliance management system’ means different things
Ask ten people what a compliance management system actually is and expect three different answers, each correct within its own context.
According to Copla, the...
What is a GRC framework, and why does it matter now?
Governance, risk and compliance are already present in most organisations, but the difference between running them as a connected system and running them as...
The risk framework regulators actually want to see
Every organisation needs a way to identify risk, score it, decide what to do, and check whether that decision held.
According to Copla, that structure,...
Why continuous compliance keeps quietly failing firms
Continuous compliance is often confused with continuous control monitoring, but the two are not the same thing, and the difference is costing firms visibility...
Why Zero Trust is reshaping EU financial compliance
Compliance teams across the EU financial sector are increasingly being asked to justify not just what controls they have in place, but why those...
GRC failures happen at the joins, not within the steps
Governance, risk and compliance have operated as three separate disciplines for decades, but GRC makes the case for running them as one connected system...










