GRC Report Staff

Australian Court Orders Record $193 Million in Penalties Over CFD Scheme That Targeted Vulnerable Investors

The Federal Court of Australia has imposed $193 million (AUD $300.2 million) in penalties against collapsed contracts-for-difference issuer Union Standard International Group and two former authorized representatives after finding they engaged in systemic unconscionable conduct that left customers with losses exceeding $53 million (AUD $83 million).

EU Moves to Reduce Reliance on Foreign Tech With Sweeping Sovereignty Package

When European Commission President Ursula von der Leyen unveiled a new package of technology proposals this week, she did not frame it as an industrial policy announcement. She framed it as a matter of control.

CISA Tells Federal Agencies to Stop Treating Every Vulnerability the Same

The Cybersecurity and Infrastructure Security Agency on Wednesday issued Binding Operational Directive 26-04, requiring federal civilian agencies to prioritize security updates according to risk rather than treating vulnerabilities as a largely uniform backlog of technical debt.

Norway Warns Geopolitical Tensions, Cyber Threats & Property Risks Could Challenge Financial Stability

Norway's financial regulator warned Thursday that rising geopolitical tensions, elevated cyber threats and continued weakness in parts of the property market are increasing risks to financial stability, even as the country's banks remain profitable and well-capitalized.

MFSA Finds Marketing Compliance Weaknesses Across Insurance & Investment Firms

Marketing disclosures are often treated as the final step in a product launch. A disclaimer is added, compliance signs off, the campaign goes live, and attention moves elsewhere. The Malta Financial Services Authority's latest supervisory review suggests that approach remains more common than regulators would like.

South Korea Hits Coupang With Record $455 Million Privacy Fine as Breach Fallout Deepens

The regulatory reckoning for Coupang has become considerably more expensive. South Korea's Personal Information Protection Commission (PIPC) has imposed penalties totaling $455 million (624.6 billion won) against the e-commerce giant following a data breach that exposed the personal information of roughly 37.5 million users, according to BBC reporting. The sanctions represent the largest privacy-related penalty ever issued in South Korea.

Risk-!n Zurich Day Two Explored the Future of Decision-Making Under Uncertainty

The second day of Risk-!n Zurich had a different character from the first. Day one was largely about visibility and how organizations can see risk clearly enough in environments shaped by artificial intelligence, cyber acceleration, operational complexity, climate exposure and emerging technologies. Day two moved the discussion one step further. If organizations can see more, faster and with greater precision, what exactly are they supposed to do with that visibility?