-
ESG is here to stay: is your policy management framework ready?
Why a lackluster policy framework will create steep hurdles for ESG successDoor: Rebecca KozlowskiIntroduction The world has experienced continuous change over the last few years, with it sometimes being difficult to know where…
-
Continuous control monitoring: the trend and how to get on board
How SAP solutions can be leveraged for continuous control monitoringHow does the market think? In a survey about Governance, Risk and Compliance ([KPMG19]), 57% of participants stated that only…
-
Incorporating ESG in risk management
Transforming internal controls framework for ESG reportingIntroduction As a Risk & Controls professional, you sometimes find yourself in the following situation, “You just finished the year-end…
-
Trust by Design: rethinking technology risk
Enhancing technology risk management in agile environments to ensure auditable trust!In society, there is a growing call for trust in technology. Just think about the data leaks and privacy issues…
-
Een Internal Control Framework in een complexe uitvoeringsorganisatie
Een voorbeeld uit de weerbarstige politiepraktijkDoor: René s'Jacob RA | Claudia VollComplexe organisaties hebben behoefte aan inzicht in hun stelsel van interne beheersing. Op basis van dat inzicht kan de werking…
-
Implementing a new GRC solution
Can anybody share some lessons learned?Managing risks, controls and compliance has become an integral part of the business operations of any organization. The intent to…
-
Mastering the ESG reporting and data challenges
How to master the ESG reporting and data challenges using a structured approachCompanies are struggling how to measure and report on their Environmental, Social, and Governance (ESG) performance. How well a company…
-
Privacy audits
Are privacy audits relevant for GRC and ESG reporting?The importance of data privacy has increased incredibly in the last couple of years. With the introduction of the General…
-
Cross-system segregations of duties analysis in complex IT landscape
Ten lessons learned based on project at financial services companyThis article explains the importance of access controls and segregation of duties in complex IT landscapes and elaborates on performing…
-
Exploring digital: empowering the Internal Control Function
Insight into four different digitization options to keep up with today's fast-paced worldThe Internal Control Function, or second line of defense is a vital part of the organization tasked with devising and…
-
Outsourcing
Supervision of outsourcing at financial institutions becomes more extensive, also impacting service providers including payment service providersService providers of payment and account information services are required to obtain a license issued by De Nederlandsche Bank (hereafter…