- Essential Knowledge
- News
- Tips
- Expert Advice
- Definitions
- Multimedia
- All
Email Alerts
-
How has the MF Global bankruptcy influenced regulation?
Details that point to the 2011 MF Global bankruptcy filing remain under federal investigation. Could the firm's collapse influence future financial regulations? FAQ
-
FAQ: How has the MF Global bankruptcy influenced financial regulation?
Details that point to the 2011 MF Global bankruptcy filing remain under federal investigation. Could the firm's collapse influence future financial regulations? FAQ
-
FAQ: How did Wal-Mart trigger FCPA violations?
Allegations that Wal-Mart bribed Mexican officials to advance business not only gave the retail giant a black eye, but also brought FCPA violation charges. FAQ
-
FAQ: Wal-Mart de Mexico scandal and how it triggered FCPA violations
FAQ
-
FAQ: How has FCPA enforcement evolved?
Regulators have ramped up Foreign Corrupt Practices Act enforcement in recent years. Is your organization ready for the increased FCPA compliance scrutiny? FAQ
-
FAQ: How has Foreign Corrupt Practices Act enforcement evolved?
FAQ
-
FAQ: The economic crisis and SEC compliance rules
Penalties levied through SEC enforcement actions have increased during the economic crisis. Is your corporate compliance program ready for SEC scrutiny? FAQ
-
FAQ: The economic crisis and SEC compliance rules
FAQ
-
Will EU data protection reforms help or hurt business?
Reforms to the EU's data protection framework are designed to enhance privacy and create uniform regulations. But what will be the cost to businesses? AIOG
-
How would the Volcker Rule affect compliance programs?
The Volcker Rule portion of the Dodd-Frank Act is designed to rein in high-risk, speculative trading. Here's why it could influence your compliance program. AIOG
- See More: Essential Knowledge on Industry-specific requirements for compliance
-
First SOX, now a rollback of Dodd-Frank regulations?
Just weeks after the JOBS Act created reductions to SOX requirements, new House legislation would cut key portions of Dodd-Frank compliance regulations. News | 19 Apr 2012
-
JOBS Act to have little influence on GRC tools and processes, for now
The JOBS Act alters compliance requirements for emerging companies, but experts say it should have little influence on GRC tools and strategy for those already on the right track. News | 16 Apr 2012
-
JOBS Act invites wide range of deregulation opinions
Proponents of the JOBS Act say deregulating emerging businesses will boost the economy. But the controversial act has attracted a variety of opinions. News | 12 Apr 2012
-
Do payment servers meet PCI compliance requirements?
The recent data breach at Global Payments Inc. should create scrutiny for credit card payment processing servers’ security and PCI compliance requirements. News | 05 Apr 2012
-
FTC pushes online privacy rules, and JOBS lessens regs
The FTC’s online privacy rules would exclude smaller businesses, and the JOBS Act loosens regulatory compliance for them. But should SMBs be exempt? News | 29 Mar 2012
-
JOBS Act moves forward; would cut back Sarbanes-Oxley requirements
The Senate has passed the Jumpstart Our Business Startups Act, legislation that would scale back Sarbanes-Oxley requirements and other compliance mandates for small business. News | 21 Mar 2012
-
Beware all costs of electronic health record systems
The push for universal electronic health record systems could drive up costs and make providers more susceptible to data breaches, according to new reports. News | 07 Mar 2012
-
Buy-in needed for Consumer Privacy Bill of Rights
President Obama has proposed a Consumer Privacy Bill of Rights, but will big online business comply with online consumer privacy rules without a fight? News | 28 Feb 2012
-
Compliance Q&A: EPIC rep discusses objections to Google privacy policy
In this Q&A, EPIC Consumer Protection Fellow David Jacobs discusses the organization’s objections to Google’s privacy policy and how to improve online consumer privacy. News | 20 Feb 2012
-
New Cybersecurity Act faces same old criticism
The Cybersecurity Act of 2012 promises a new approach to online data protection, but it faces the same criticisms that plagued previous legislation. News | 15 Feb 2012
- See More: News on Industry-specific requirements for compliance
-
Audit management: Five strategies to streamline the PCI audit process
Tired of the same Payment Card Industry (PCI) assessment headaches every year? Here are five process strategies to streamline the PCI audit process. Tip
-
The sometimes-harsh realities of information security and compliance
Following information security and compliance regulations can hinder your everyday business processes. Here's why you need to strike a proper balance. Tip
-
How regulation should -- and shouldn't -- influence cybersecurity policy
Recent breaches display the importance of cybersecurity policy, and regulations provide a decent data protection roadmap. But compliance does not automatically equal security. Tip
-
Seven security and compliance lessons from a credit card breach
A credit card data breach can create turmoil throughout your organization. Here are seven information security and compliance lessons to help your business. Tip
-
Five tips to help guide green compliance at your organization
As more industries push for environmentally friendly processes, green compliance is a major concern. Here are tips to help incorporate the right green IT practices at your organization. Top Five
-
New and not-so-new security twists in the Cybersecurity Act of 2012
The Cybersecurity Act of 2012 gives the government more control over the private sector’s information security. But are the new rules really needed? Our expert says no. Tip
-
Sustainability: From strategic objective to compliance operation
With the increased interest in going green, sustainability and compliance are now directly related. But making sustainability integral to your compliance operation is not easy. Tip
-
Best practices for risk management and sustainability convergence
As the term ”sustainability" has become popular in business, some have questioned its relationship with GRC. But risk management and sustainability are not mutually exclusive. Tip
-
How protecting against the OWASP Top 10 helps prevent compliance risk
Mapping security processes to protect against the OWASP Top 10 could ease Web application vulnerabilities and help some companies stay compliant. Tip
-
Global IT outsourcing raises compliance, risk management concerns
Outsourcing can add to compliance risk management problems for federally regulated groups whose work involves sensitive areas like national security. Tip
- See More: Tips on Industry-specific requirements for compliance
-
Payment card industry compliance: Protect phoned-in credit card data
Mathieu Gorge explains how to protect credit card data over the phone if you're a call centre trying to meet payment card industry compliance standards. Ask the Expert
-
NERC CIP (critical infrastructure protection)
The NERC CIP (critical infrastructure protection) plan is a set of requirements designed to secure assets vital to reliably operating North America's bulk electric system. Definition
-
Volcker rule
The Volcker rule is a section of the Dodd–Frank Act that restricts U.S. banks from making speculative, high-risk investments that do not benefit customers. Definition
-
corporate social responsibility (CSR)
Corporate social responsibility is an umbrella term used to describe voluntary corporate initiatives concerned with community development, the environment and human rights. Definition
-
IFRS (International Financial Reporting Standards)
IFRS (International Financial Reporting Standards) is a set of accounting standards developed by an independent, not-for profit organization called the International Accounting Standards Board (IASB). Definition
-
PCI compliance (payment card industry compliance)
Payment card industry (PCI) compliance is adherence to a set of security standardsthat were developed to protect card information during and after a financial transaction. Definition
-
XBRL (Extensible Business Reporting Language)
XBRL (Extensible Business Reporting Language) is an XML-based computer language for the electronic transmission of business and financial data. The goal of XBRL is to standardize the automation of business intelligence (BI). Definition
-
Podcast: The barriers to PCI DSS compliance and how to overcome them
Some businesses struggle with the Payment Card Industry Data Security Standard. In this podcast, learn strategies to maintain PCI DSS compliance. Podcast