-
ESG is here to stay: is your policy management framework ready?
Why a lackluster policy framework will create steep hurdles for ESG successIntroduction The world has experienced continuous change over the last few years, with it sometimes being difficult to know where…
-
Continuous control monitoring: the trend and how to get on board
How SAP solutions can be leveraged for continuous control monitoringHow does the market think? In a survey about Governance, Risk and Compliance ([KPMG19]), 57% of participants stated that only…
-
Incorporating ESG in risk management
Transforming internal controls framework for ESG reportingIntroduction As a Risk & Controls professional, you sometimes find yourself in the following situation, “You just finished the year-end…
-
Trust by Design: rethinking technology risk
Enhancing technology risk management in agile environments to ensure auditable trust!In society, there is a growing call for trust in technology. Just think about the data leaks and privacy issues…
-
Implementing a new GRC solution
Can anybody share some lessons learned?Managing risks, controls and compliance has become an integral part of the business operations of any organization. The intent to…
-
Mastering the ESG reporting and data challenges
How to master the ESG reporting and data challenges using a structured approachCompanies are struggling how to measure and report on their Environmental, Social, and Governance (ESG) performance. How well a company…
-
Privacy audits
Are privacy audits relevant for GRC and ESG reporting?The importance of data privacy has increased incredibly in the last couple of years. With the introduction of the General…
-
Cross-system segregations of duties analysis in complex IT landscape
Ten lessons learned based on project at financial services companyBy: | Pascal van Vugt MScThis article explains the importance of access controls and segregation of duties in complex IT landscapes and elaborates on performing…
-
Exploring digital: empowering the Internal Control Function
Insight into four different digitization options to keep up with today's fast-paced worldThe Internal Control Function, or second line of defense is a vital part of the organization tasked with devising and…
-
Outsourcing
Supervision of outsourcing at financial institutions becomes more extensive, also impacting service providers including payment service providersService providers of payment and account information services are required to obtain a license issued by De Nederlandsche Bank (hereafter…