GRC Report Staff

Key Holding, a Delaware-based logistics firm with global operations, just learned the hard way that in the world of sanctions, ignorance isn’t bliss, it’s rather expensive. After acquiring a Colombian freight subsidiary in late 2021, the company failed to realize that the acquisition brought new obligations under U.S. sanctions laws. That oversight ultimately led to 36 unauthorized shipments to Cuba, triggering a $608,825 settlement with the U.S. Treasury Department’s Office of Foreign Assets Control (OFAC).

Sustainability has officially entered the core business agenda. For many corporations, it’s directly tied to profitability, investment decisions, and long-term risk management, no longer a side initiative or a reputational hedge. That shift comes through clearly in Morgan Stanley’s latest Sustainable Signals: Corporates 2025 report, where 88% of surveyed companies said they view sustainability as a value creation opportunity. The report, based on responses from over 330 decision-makers worldwide, shows that sustainability is maturing, but so are the risks and the complexi

In the high-speed world of energy trading, algorithms are calling more of the shots. But with greater automation comes a bigger question over who's watching the watchers?

If you’ve been feeling like everyone’s talking about AI but few are truly doing something transformative with it, you're not alone. But a new study from AuditBoard and Panterra Research shows that the most advanced organizations aren’t just dabbling in AI for governance, risk, and compliance (GRC). They’re scaling the mountain, and leaving others at base camp.

Five payment firms in Singapore just learned a costly lesson about weak anti-money laundering controls and why it won’t fly under the radar. The Monetary Authority of Singapore (MAS) has issued $710,000 (S$960,000) in composition penalties after uncovering serious compliance failures across five licensed payment institutions. The firms (Remsea, Arcade Plaza Traders, J-Dee Remittance, Mobile Community Tech, and OxPay SG) were found to have fallen short of core safeguards meant to prevent financial crime.

Australia’s banks, insurers, and superannuation funds are officially on the hook for doing a lot more than hoping things don’t go wrong. With the Australian Prudential Regulation Authority’s CPS 230 Operational Risk Management now in effect, financial institutions must prove they’re ready to weather disruptions that could bring the system, and millions of lives, to a standstill.

Tech companies love to talk about safety, but Ofcom isn’t buying the press releases. On Monday, the UK’s media and communications regulator released a fresh batch of proposals under the Online Safety Act, this time urging platforms to stop turning a blind eye to how fast harm can spread and who it hurts most.