GRC Report Staff

Daekyo had been warned. In August 2024, after hackers exploited vulnerabilities in websites operated by its affiliates, the South Korean education provider received a report of suspicious activity from its security monitoring contractor. The company failed to investigate adequately or close the weaknesses that had allowed the intrusion. Six months later, attackers exploited the same vulnerabilities again.

ASIC Form 545 is the statement a liquidator lodges to confirm that notices were sent to persons on the final list or supplementary list of contributories under Regulation 5.6.62. It must be lodged within one month of the notices being sent. Late lodgement triggers fees, and a form is not treated as lodged until ASIC accepts it. This is a procedural form, not a new rule, but it matters for compliance teams involved in insolvency and wind-up processes.

The ECB Governing Council unanimously raised all three key interest rates by 25 basis points at its September 9-10, 2026 meeting in Berlin. It cited inflationary pressure from the Middle East conflict and projected that inflation will stay above the 2% target through 2027. Compliance and risk teams should treat this as a signal to review interest rate risk, credit risk, and the conduct implications of rising rates. Bundesbank President Nagel's comments suggest further tightening is possible.

ASIC's Form 106 and its accompanying guide set out the limited circumstances in which a document already lodged on the public register can be withdrawn, namely duplication or an error where exceptional circumstances exist. Lodgement does not guarantee withdrawal, and many document types cannot be withdrawn at all. Compliance teams should treat lodgement accuracy as a front-end control, because corrections are discretionary and the withdrawn record stays visible.

ASIC's Form 506 (version dated 27 January 2021) requires liquidators, receivers, and controllers to notify ASIC of an address change within 14 days. Late lodgement triggers fees. Administrators, deed administrators, scheme administrators, and restructuring practitioners have no lodgement requirement. Insolvency practitioners and the firms that engage them should confirm their internal processes meet this deadline.

BaFin has warned that unknown callers are spoofing its telephone number to pressure consumers into transferring money. BaFin states it never contacts private individuals unsolicited by phone to request or demand transfers, and it does not use third parties to do so. Compliance teams should treat this as an impersonation-fraud and consumer-protection signal that calls for customer communication and updates to fraud controls.

The Norway Financial Supervisory Authority has listed Seven Apex Capital in a warning that appears to originate from Portugal's securities regulator, the CMVM. Compliance teams should treat the entity as a potential unauthorized or fraudulent investment solicitor and screen for any exposure. The source record is sparse, so the details need independent verification.