Practical takes on GRC, security compliance, and cyber risk, written for people building real programs, not ticking boxes.
A $300 million compliance startup got caught allegedly running compliance theatre at scale. The Delve scandal explains why certificates lost their meaning, what buyers must do differently, and why no platform replaces a consultant who will tell you no.
9 May 2026
In the realm of cybersecurity, understanding the various types of threat actors is critical to building effective defences.
5 May 2026
In today’s interconnected business landscape, understanding the risks associated with third-party suppliers is essential to maintaining operational integrity.
1 May 2026
The Unfiltered GRC Automation Roundtable left with a few key questions of my own. In this post, I’ll share my main takeaways, the concerns that still keep me up at night.
28 March 2026
In the evolving cybersecurity landscape, financial institutions face several complex challenges.
4 December 2025
21 November 2025
Amid the rapid growth of digital transformation, cloud platforms such as Snowflake are now essential components of modern business infrastructures.
6 November 2025
As cybersecurity threats escalate globally, various sectors—including finance, legal, and real estate—are increasingly vulnerable.
31 October 2025
The financial services industry is a prime target for cyberattacks due to the sensitive data it holds.
10 October 2025
Financial services are prime targets for cybercriminals due to the sensitive data they handle.
8 October 2025
Cybersecurity breaches have become a critical concern for businesses and industries globally.
1 October 2025
No pitch. Just a straight conversation about your compliance program.
