GRC Report Staff

OCC Cracks Down on Banks & Employees in February 2025 Enforcement Actions

The Office of the Comptroller of the Currency (OCC) is keeping a close watch on both banks and their employees with its February enforcement actions. The agency has taken action against several banks and individuals for serious compliance failures and misconduct. It’s not just about issuing penalties, it’s about ensuring lasting change and reinforcing accountability across the banking industry.

YAPP USA Pays $14.2 Million to Settle False Claims Act Allegations

YAPP USA Automotive Systems Inc. has agreed to pay $14.2 million after being accused of falsely certifying its eligibility for a Paycheck Protection Program (PPP) loan. The company, a subsidiary of State Development and Investment Corp. Ltd., a Chinese state-owned entity, applied for and received a $9.6 million loan under the PPP, which was later forgiven by the Small Business Administration (SBA). However, the U.S. government says the company did not meet the necessary criteria to qualify.

DOJ Takes Action on False Claims, Holding Healthcare Providers & Contractors Accountable

When you think of government contracts, the last thing that might come to mind is a mix-up of payments or a cybersecurity breach, especially when it comes to protecting our nation’s military families. But that’s exactly what’s behind two of the most recent enforcement actions by the Department of Justice (DOJ), resulting in settlements worth more than $40 million. These cases serve as a strong reminder of the serious responsibility companies take on when they sign contracts to serve the public, particularly when it involves taxpayer funds and sensitive data.

The ESAs Take the Next Step in Overseeing Critical Third-Party Service Providers Under DORA

The European Supervisory Authorities (ESAs) are paving the way for a stronger oversight framework. Their latest initiative is a clear and deliberate step towards tackling third-party risk, particularly concerning critical ICT service providers, under the EU’s Digital Operational Resilience Act (DORA).

FCA Slaps £1.66 Million Fine on Mako for Failures in Preventing Financial Crime

The Financial Conduct Authority (FCA) has handed down a fine of £1,662,700 to Mako Financial Markets Partnership LLP (Mako) for serious lapses in its systems and controls—failings that left it vulnerable to facilitating financial crime. This is the latest in a series of enforcement actions stemming from the FCA’s deep dive into cum-ex trading, a practice that has raised alarms across Europe and beyond.

Cybersecurity for SMBs: Navigating Complexity & Building Resilience

Cybersecurity is not a new concept for modern organizations. Scheduled password changes, two-factor authentication, and mandatory training sessions are standard practices in most office environments. As computers have become the primary tool for business operations, the data they generate has become one of the most valuable assets across industries.

Barclays Under Investigation for Gaps in Money-Laundering Oversight

Barclays has found itself in the midst of an investigation by the U.K.’s Financial Conduct Authority (FCA) over its money-laundering controls. The London-based bank disclosed this news on Thursday in its annual report, confirming its full cooperation with the FCA as the regulator digs deeper into the bank’s handling of financial crime risks.