Theme: Governance Risk and Compliance

Compact 2022/1 |
ESG & GRC: how to maneuver?

Emerging global and European sustainability reporting requirements

Navigating the complexity and getting ready

By: Anton Zhigalov | Gijs de Graaff

This article looks at new developments in sustainability reporting on a global and European level. A global multi-stakeholder acknowledgment for…
Compact 2022/1 |
ESG & GRC: how to maneuver?

Trust by Design: rethinking technology risk

Enhancing technology risk management in agile environments to ensure auditable trust!

By: Swatantra Kumar, M.Tech, PGDAC, BE | Stefan Jacobs MSc | Tom Koehler

In society, there is a growing call for trust in technology. Just think about the data leaks and privacy issues…
Compact 2022/1 |
ESG & GRC: how to maneuver?

An Internal Control Framework in a complex organization

An example from the unruly police practice

By: René s'Jacob RA | Claudia Voll

Complex organizations need insight in their system of internal control. Based on this insight, the operation of that system can…
Compact 2022/1 |
ESG & GRC: how to maneuver?

Implementing a new GRC solution

Can anybody share some lessons learned?

By: drs. Dennis Hallemeesch RE | Dave Günthardt MSc RE | drs. Hugo Rothengatter RE CISA

Managing risks, controls and compliance has become an integral part of the business operations of any organization. The intent to…
Compact 2022/1 |
ESG & GRC: how to maneuver?

Mastering the ESG reporting and data challenges

How to master the ESG reporting and data challenges using a structured approach

By: Marco van Delft | Chris Hoffman RE RA | Eline Verhaar | Paul Pieroen

Companies are struggling how to measure and report on their Environmental, Social, and Governance (ESG) performance. How well a company…
Compact 2022/1 |
ESG & GRC: how to maneuver?

Privacy audits

Are privacy audits relevant for GRC and ESG reporting?

By: Maryam Amaador | drs. Henk Hendriks RE CISA

The importance of data privacy has increased incredibly in the last couple of years. With the introduction of the General…
Compact 2021/2 |
The path to data-driven organizations

No AI risk if you don't use AI? Think again!

By: Dr. Alexander Boer

AI-related risks regularly make news headlines and have led to a number of legislative initiatives in the areas of privacy,…
Compact 2021/1 |
Cloud Computing

Handling data transfers in a changing landscape

By: Laura Huijts LL.M. CIPP/E CIPM CIPT | Daniela Gonzalez Riedel CIPP/E

Although privacy has long been a discussion point within technology, its role in the use of Cloud services has not…
Compact 2020/3 |
Business Platforms & Internet of Things

Cross-system segregations of duties analysis in complex IT landscape

Ten lessons learned based on project at financial services company

By: | Pascal van Vugt MSc

This article explains the importance of access controls and segregation of duties in complex IT landscapes and elaborates on performing…
Compact 2020/3 |
Business Platforms & Internet of Things

Exploring digital: empowering the Internal Control Function

Insight into four different digitization options to keep up with today's fast-paced world

By: Sylvester van der Giesen MSc | Vincent Speelman MSc

The Internal Control Function, or second line of defense is a vital part of the organization tasked with devising and…
Compact 2020/2 |
Payments & Business Technology

Transaction monitoring model validation

An approach to self-attestation

By: Chrit van Beusecom MSc | Jori van Schijndel MSc

The bar for transaction monitoring by financial institutions has been raised during the past decade. Recently, several banks have been…
Compact 2020/2 |
Payments & Business Technology

PSD2 risks and IT controls to mitigate

By: Bhagyashree Mall CISA BTech | Orpa Schlemmert CISA ACMA CGMA | Stephanie Oechslin MCom CISA CA(SA)

With the introduction of the second Payment Service Directive (PSD2), some new IT risks evolved from the regulation which has…
Compact 2020/2 |
Payments & Business Technology

Outsourcing

Supervision of outsourcing at financial institutions becomes more extensive, also impacting service providers including payment service providers

By: Kiruna Boll-van Schip MSc RA | Maarten Visser MSc

Service providers of payment and account information services are required to obtain a license issued by De Nederlandsche Bank (hereafter…
Compact 2020/1 | Cyber Security & Privacy

Emerging from the shadows

Why business ownership is the answer to managing the risk of Shadow IT

By: Olga Kulikova MSc | Ramya Iyer MSc

Shadow IT might sound threatening to some people, as if it originates from a thrilling detective novel. In an organizational…
Compact 2019/4 | Digital Auditing & Beyond

How will blockchain impact an information risk management approach?

By: Steven van der Weerd MSc

Blockchain is considered an emerging technology that has the potential to significantly transform the way we transact. The establishment of…
Compact 2019/4 | Digital Auditing & Beyond

Robo-advice: how to raise a new machine

What are the risks and the controls to mitigate them?

By: R.J. Voster BEng

Johannes Kepler, a German 17th century astronomer, famous for discovering how planets revolve around the sun, is supposed to have…