GRC Report Staff

The Accounting and Corporate Regulatory Authority (ACRA) has opened a public consultation on draft Singapore Sustainability Disclosure Standards that would require companies to explain how they identify, assess, and manage climate-related risks and opportunities. The consultation runs from July 27 through Oct. 25, giving businesses, investors, assurance providers, and professional bodies a chance to shape the rules before they are finalized.

The European insurance sector remains on stable footing despite growing geopolitical uncertainty and an increasingly challenging cyber threat landscape, according to the latest risk assessment from the European Insurance and Occupational Pensions Authority (EIOPA).

A banking outage used to be the sort of event that invited an engineering postmortem. Something broke, someone fixed it, and a report followed. Japan's Financial Services Agency no longer believes that sequence tells the whole story.

The Australian Energy Regulator spent much of the past year following the money. It traced overcharges to Centrepay customers, questioned whether vulnerable households had been properly protected, examined how retailers treated customers struggling to pay their bills, and looked closely at what happened when obligations designed to shield people from harm became little more than words on paper.

The Cybersecurity and Infrastructure Security Agency has released an updated framework for Software Bills of Materials, broadening the minimum information organizations should include when documenting software components as governments and businesses place growing emphasis on software supply chain security.

When Microsoft folded Copilot into its Microsoft 365 subscriptions last year, the change arrived quietly enough. Existing customers on Personal and Family plans suddenly found themselves with new AI features at no extra cost for the remainder of their subscriptions. The real decision came later, when renewal notices began arriving and the free addition became a more expensive default.

The legal fight over Bunnings may be over, but the Office of the Australian Information Commissioner is making sure its lessons are not left behind in a tribunal ruling. The regulator on Tuesday published updated guidance for organizations covered by the Australian Privacy Principles that are considering deploying facial recognition technology in busy, publicly accessible spaces such as retail storefronts. The revisions are not a change in the law. They are a statement of how the Office of the Australian Information Commissioner (OAIC) intends to apply it after the Administrative Review Tribunal's March 2026 decision in the long-running Bunnings case.