Risk & Resilience

Dutch Watchdog Warns Market Resilience Is Showing Cracks as Risks Rise

The Netherlands Authority for the Financial Markets is sounding the alarm on what it calls a “treacherous” sense of calm across global markets. In its Trend Monitor 2026 report and a separate deep dive on scenario thinking, the regulator warns that the stability seen in recent years is resting on an uneasy balance that could tip with little warning.

When Resilience Becomes Muscle Memory

In my last piece, The Inevitability of Failure, I wrote about something most leaders quietly know but rarely say out loud—failure isn’t an interruption of the journey, it is the terrain. That article opened the door to a conversation I’ve been having with myself for decades, long before GRC became my lens for understanding how organizations move through uncertainty.

Portugal’s Insurance & Pension Supervisor Advances Anti-Corruption Framework

Portugal’s Insurance and Pension Funds Supervisory Authority (ASF) has approved its updated Corruption and Related Offenses Risk Prevention Plan for 2025, the latest step in the agency’s effort to strengthen internal governance and reinforce public confidence in the supervision of Portugal’s insurance and pension fund sectors.

How to Model Risk

In this article, Graeme Keith explores what it really means to build a risk model that is genuinely useful in practice rather than simply mathematically impressive. He emphasizes that effective models must be embedded in real decision-making processes, aligned with clear objectives, and developed collaboratively with stakeholders. The focus is on modeling as a creative, iterative, and context-driven exercise that prioritizes understanding causal relationships and supporting informed action.

This Is Missing From Most GRC & ERM Programs

In his latest piece, Norman Marks breaks down a critical gap he continues to see across GRC and ERM programs: the absence of a true top-down, objective-focused approach. While many organizations and software platforms emphasize identifying risks first and then mapping them to objectives, Marks argues that this bottoms-up structure misses what matters most. To understand risk and opportunity in a meaningful way, he explains, organizations must start with their enterprise objectives, strategies, and goals, and then determine what could hinder or enable their achievement.

As Network Threats Rise, Five Nations Move to Reinforce Telecoms Security Frameworks

Telecoms regulators from the United Kingdom, United States, Canada, Australia and New Zealand have agreed to step up cooperation to shore up the security and reliability of global communications networks, following three days of meetings hosted by Ofcom in London.

Is Your Business Blind?

If you are driving down the highway at 65mph (104.6kph), a broken-down truck in the middle of the road ahead is a serious source of risk. You might consider it the #1 entry in your list of top risks (if you were to put such a list together as you were driving). But what if you can’t see it?