Risk hasn’t just increased, it’s become more connected, more dynamic, and harder to contain within traditional GRC models. This report, developed with Harvard Business Review Analytic Services, explores how organizations are responding by rethinking GRC through AI. Not as a layer of automation on top of existing processes, but as a way to fundamentally change how risk is understood and managed.
New York Governor Kathy Hochul is drawing a line between climate ambition and economic reality, warning that the state’s current path under its landmark climate law may need adjusting to avoid placing additional strain on households and businesses.
Italy’s competition authority has fined Trustpilot €4 million, concluding that the widely used review platform misled consumers through how it collected, labeled, and presented ratings.
Europe’s banking sector is stepping into a more volatile geopolitical landscape with a steady footing, according to new data released Monday by the European Banking Authority.
In a rare show of coordination, 61 data protection authorities from across the globe have issued a joint statement warning that AI systems capable of generating realistic images and videos of real people are creating a fast-moving and deeply personal category of risk. The concern is not just about misinformation or synthetic media in the abstract. It is about harm that lands squarely on individuals, often without their knowledge and increasingly without meaningful recourse.
A Federal Court in Australia has found that Macquarie Investment Management failed to take a step that, in hindsight, feels both simple and consequential. It did not put the Shield Master Fund on a watch list. That omission, the Court declared, amounted to a contravention of the Corporations Act. And while the legal finding is precise, the broader message lands with more weight. In a system built on trust and long-term stewardship, failing to escalate concerns early can carry real consequences, even when the damage is later repaired.
At a Brussels conference this week hosted by the European Data Protection Board, senior officials from across the EU made a clear case that the next phase of enforcement will hinge less on new rules and more on how well authorities work together to apply the ones already in place.