<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet href="https://riskpublishing.com/wp-content/plugins/pretty-rss-feeds/xslt/pretty-feed.xsl" type="text/xsl" media="screen" ?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	xmlns:media="http://search.yahoo.com/mrss/" >

<channel>
	<title>Governance, Risk &amp; Compliance &#8211; Risk Publishing</title>
	<atom:link href="https://riskpublishing.com/grc/feed/" rel="self" type="application/rss+xml" />
	<link>https://riskpublishing.com</link>
	<description>Connecting Risk Professionals</description>
	<lastBuildDate>Fri, 05 Jun 2026 13:29:45 +0000</lastBuildDate>
	<language>en-US</language>
	<sy:updatePeriod>
	hourly	</sy:updatePeriod>
	<sy:updateFrequency>
	1	</sy:updateFrequency>
	<generator>https://wordpress.org/?v=7.0</generator>

<image>
	<url>https://riskpublishing.com/wp-content/uploads/2021/12/cropped-favicon2-32x32.png</url>
	<title>Governance, Risk &amp; Compliance &#8211; Risk Publishing</title>
	<link>https://riskpublishing.com</link>
	<width>32</width>
	<height>32</height>
</image> 
	<item>
		<title>GRC vs ERM: How Governance, Risk, and Compliance Differs from ERM</title>
		<link>https://riskpublishing.com/grc-vs-erm-how-governance-risk-and-complian/</link>
		
		<dc:creator><![CDATA[Chris Ekai]]></dc:creator>
		<pubDate>Sat, 18 Apr 2026 22:24:31 +0000</pubDate>
				<category><![CDATA[Governance, Risk & Compliance]]></category>
		<guid isPermaLink="false">https://riskpublishing.com/?p=34682</guid>

					<description><![CDATA[Two years after a mid-cap insurer deployed a six-figure GRC platform, the CRO still could not answer the board&#8217;s top question in under a minute: which five risks threaten strategy execution? The GRC tool held 4,200 controls, 900 policies, and 12,000 issue records. It could not, however, produce a prioritized enterprise risk view. The root ... <a title="GRC vs ERM: How Governance, Risk, and Compliance Differs from ERM" class="read-more" href="https://riskpublishing.com/grc-vs-erm-how-governance-risk-and-complian/" aria-label="Read more about GRC vs ERM: How Governance, Risk, and Compliance Differs from ERM">Read more</a>]]></description>
		
		
		
			</item>
		<item>
		<title>Internal Audit Work Program Templates: 12 Industry-Specific Examples</title>
		<link>https://riskpublishing.com/internal-audit-work-program-templates-examples/</link>
		
		<dc:creator><![CDATA[Chris Ekai]]></dc:creator>
		<pubDate>Tue, 14 Apr 2026 12:46:59 +0000</pubDate>
				<category><![CDATA[Governance, Risk & Compliance]]></category>
		<guid isPermaLink="false">https://riskpublishing.com/?p=34382</guid>

					<description><![CDATA[When JPMorgan Chase received a $250 million civil money penalty from the Office of the Comptroller of the Currency, the enforcement action did not cite a failure of audit technology or a shortage of auditors. It cited the bank’s failure to maintain adequate internal controls and internal audit oversight over its fiduciary business. The root ... <a title="Internal Audit Work Program Templates: 12 Industry-Specific Examples" class="read-more" href="https://riskpublishing.com/internal-audit-work-program-templates-examples/" aria-label="Read more about Internal Audit Work Program Templates: 12 Industry-Specific Examples">Read more</a>]]></description>
		
		
		
			</item>
		<item>
		<title>Risk Management Policy Template: How to Write and Implement One</title>
		<link>https://riskpublishing.com/risk-management-policy-template-how-to-write/</link>
		
		<dc:creator><![CDATA[Chris Ekai]]></dc:creator>
		<pubDate>Tue, 14 Apr 2026 10:08:10 +0000</pubDate>
				<category><![CDATA[Governance, Risk & Compliance]]></category>
		<category><![CDATA[Risk Appetite]]></category>
		<guid isPermaLink="false">https://riskpublishing.com/?p=34361</guid>

					<description><![CDATA[When Wells Fargo&#8217;s cross-selling scandal erupted in 2016, exposing millions of fraudulent customer accounts created over five years, investigators traced the failure to a risk management policy that existed on paper but was never enforced at the frontline. The policy defined risk appetite. It assigned accountability. It required escalation. But none of those mechanisms stopped ... <a title="Risk Management Policy Template: How to Write and Implement One" class="read-more" href="https://riskpublishing.com/risk-management-policy-template-how-to-write/" aria-label="Read more about Risk Management Policy Template: How to Write and Implement One">Read more</a>]]></description>
		
		
		
			</item>
		<item>
		<title>ISO 31000 vs COSO ERM: Which Risk Management Framework Should You Adopt?</title>
		<link>https://riskpublishing.com/iso-31000-vs-coso-erm-which-risk-management/</link>
		
		<dc:creator><![CDATA[Chris Ekai]]></dc:creator>
		<pubDate>Mon, 13 Apr 2026 15:00:54 +0000</pubDate>
				<category><![CDATA[Governance, Risk & Compliance]]></category>
		<guid isPermaLink="false">https://riskpublishing.com/?p=34296</guid>

					<description><![CDATA[ISO 31000 vs COSO ERM is the defining framework debate in enterprise risk management today. The FERMA Global Risk Manager Survey 2024, conducted in partnership with PwC and RIMS across 77 countries, confirmed what most risk practitioners already suspected: organizations are no longer asking whether to implement enterprise risk management, but which framework to build ... <a title="ISO 31000 vs COSO ERM: Which Risk Management Framework Should You Adopt?" class="read-more" href="https://riskpublishing.com/iso-31000-vs-coso-erm-which-risk-management/" aria-label="Read more about ISO 31000 vs COSO ERM: Which Risk Management Framework Should You Adopt?">Read more</a>]]></description>
		
		
		
			</item>
		<item>
		<title>SOX Compliance and ERM: How to Align Internal Controls with COSO</title>
		<link>https://riskpublishing.com/sox-compliance-and-erm-how-to-align-internal/</link>
		
		<dc:creator><![CDATA[Chris Ekai]]></dc:creator>
		<pubDate>Wed, 01 Apr 2026 14:40:05 +0000</pubDate>
				<category><![CDATA[Governance, Risk & Compliance]]></category>
		<guid isPermaLink="false">https://riskpublishing.com/?p=33932</guid>

					<description><![CDATA[A mid-cap manufacturer&#8217;s CFO discovered during quarterly close that three business units were managing SOX controls independently, with no connection to the enterprise risk framework. One division had implemented the required segregation of duty control, but in isolation—using a spreadsheet spreadsheet workaround because IT hadn&#8217;t been asked to enforce the same control application-wide. Another division ... <a title="SOX Compliance and ERM: How to Align Internal Controls with COSO" class="read-more" href="https://riskpublishing.com/sox-compliance-and-erm-how-to-align-internal/" aria-label="Read more about SOX Compliance and ERM: How to Align Internal Controls with COSO">Read more</a>]]></description>
		
		
		
			</item>
		<item>
		<title>DORA Compliance Checklist: What US Financial Firms Need to Know</title>
		<link>https://riskpublishing.com/dora-compliance-checklist-what-us-financial-2/</link>
		
		<dc:creator><![CDATA[Chris Ekai]]></dc:creator>
		<pubDate>Tue, 31 Mar 2026 19:01:27 +0000</pubDate>
				<category><![CDATA[Governance, Risk & Compliance]]></category>
		<guid isPermaLink="false">https://riskpublishing.com/?p=33873</guid>

					<description><![CDATA[DORA compliance checklist requirements became urgent for US financial firms when the European Supervisory Authorities designated 19 ICT service providers as critical third-party providers in November 2025, including AWS, Microsoft Azure, and Google Cloud, sending ripple effects well beyond Brussels. In New York, Chicago, and San Francisco, risk managers at US banks, broker-dealers, and insurance ... <a title="DORA Compliance Checklist: What US Financial Firms Need to Know" class="read-more" href="https://riskpublishing.com/dora-compliance-checklist-what-us-financial-2/" aria-label="Read more about DORA Compliance Checklist: What US Financial Firms Need to Know">Read more</a>]]></description>
		
		
		
			</item>
		<item>
		<title>Best Policy Management Software Compared</title>
		<link>https://riskpublishing.com/best-policy-management-software-compared/</link>
					<comments>https://riskpublishing.com/best-policy-management-software-compared/#respond</comments>
		
		<dc:creator><![CDATA[Chris Ekai]]></dc:creator>
		<pubDate>Tue, 31 Mar 2026 11:34:54 +0000</pubDate>
				<category><![CDATA[Governance, Risk & Compliance]]></category>
		<guid isPermaLink="false">https://riskpublishing.com/?p=33823</guid>

					<description><![CDATA[The best policy management software compared in this guide will help your organization centralize policies, automate compliance workflows, and satisfy regulators with audit-ready evidence. Picture this: your Chief Compliance Officer walks into Monday&#8217;s board meeting, and the audit committee chair asks a single question: &#8220;Can you prove every employee acknowledged our updated data privacy policy ... <a title="Best Policy Management Software Compared" class="read-more" href="https://riskpublishing.com/best-policy-management-software-compared/" aria-label="Read more about Best Policy Management Software Compared">Read more</a>]]></description>
		
					<wfw:commentRss>https://riskpublishing.com/best-policy-management-software-compared/feed/</wfw:commentRss>
			<slash:comments>0</slash:comments>
		
		
			</item>
		<item>
		<title>Best Compliance Management Software Compared: CCO Tools for 2026</title>
		<link>https://riskpublishing.com/best-compliance-management-software-compared/</link>
		
		<dc:creator><![CDATA[Chris Ekai]]></dc:creator>
		<pubDate>Mon, 30 Mar 2026 15:03:20 +0000</pubDate>
				<category><![CDATA[Governance, Risk & Compliance]]></category>
		<guid isPermaLink="false">https://riskpublishing.com/?p=33795</guid>

					<description><![CDATA[Finding the best compliance management software compared across vendors is essential for CCOs navigating a rapidly evolving regulatory landscape. Here we evaluate the top platforms side by side. In January 2025, the Digital Operational Resilience Act (DORA) took effect across the European Union, imposing mandatory ICT risk frameworks on every financial institution operating in or ... <a title="Best Compliance Management Software Compared: CCO Tools for 2026" class="read-more" href="https://riskpublishing.com/best-compliance-management-software-compared/" aria-label="Read more about Best Compliance Management Software Compared: CCO Tools for 2026">Read more</a>]]></description>
		
		
		
			</item>
		<item>
		<title>RCSA: The Complete Guide to Risk and Control Self-Assessment</title>
		<link>https://riskpublishing.com/rcsa-the-complete-guide-to-risk-and-control-self-assessment/</link>
		
		<dc:creator><![CDATA[Chris Ekai]]></dc:creator>
		<pubDate>Wed, 25 Mar 2026 17:09:37 +0000</pubDate>
				<category><![CDATA[RCSA]]></category>
		<category><![CDATA[Governance, Risk & Compliance]]></category>
		<guid isPermaLink="false">https://riskpublishing.com/?p=33534</guid>

					<description><![CDATA[Key Takeaways RCSA (Risk and Control Self-Assessment) is the core operational risk tool that enables first-line business units to identify risks, evaluate control effectiveness, and determine residual risk levels. Deloitte describes the RCSA paradox: it consumes the most effort in operational risk management, yet often produces limited insight for decision-makers. The RCSA process follows six ... <a title="RCSA: The Complete Guide to Risk and Control Self-Assessment" class="read-more" href="https://riskpublishing.com/rcsa-the-complete-guide-to-risk-and-control-self-assessment/" aria-label="Read more about RCSA: The Complete Guide to Risk and Control Self-Assessment">Read more</a>]]></description>
		
		
		
			</item>
		<item>
		<title>Best Internal Audit Management Software Compared: Top Platforms for 2026</title>
		<link>https://riskpublishing.com/best-internal-audit-management-software-compa/</link>
		
		<dc:creator><![CDATA[Chris Ekai]]></dc:creator>
		<pubDate>Mon, 23 Mar 2026 14:33:33 +0000</pubDate>
				<category><![CDATA[Governance, Risk & Compliance]]></category>
		<category><![CDATA[Supply chain risk management]]></category>
		<guid isPermaLink="false">https://riskpublishing.com/?p=33344</guid>

					<description><![CDATA[Key Takeaways The internal audit management software market is projected to reach $6.0 billion by 2033 (Persistence Market Research), growing at 15.4% CAGR as regulatory complexity, AI adoption, and cloud migration drive investment in modern audit technology. AuditBoard leads the market with a 9.5/10 G2 rating for audit workflow, while Workiva dominates SOX and financial ... <a title="Best Internal Audit Management Software Compared: Top Platforms for 2026" class="read-more" href="https://riskpublishing.com/best-internal-audit-management-software-compa/" aria-label="Read more about Best Internal Audit Management Software Compared: Top Platforms for 2026">Read more</a>]]></description>
		
		
		
			</item>
	</channel>
</rss>
