Where the field convenes. Privately. A curated private community for credentialed ethics, risk, and compliance leaders across the ECI and Compliance Week network. Ask the questions you can’t post ...

On October 11, 2024, the U.S. Department of Defense (DoD) at long last published a final rule establishing the Cybersecurity Maturity Model Certification (CMMC) Program (the Final Rule). Designed to ...

A security maturity model is a framework for measuring – you guessed it – the maturity of a security program. A maturity model helps assess the current operational effectiveness of key processes ...

Even though many businesses invest in useful compliance training to help reduce the liability and legal risks they face, for some, integrating that training with their business strategy means ...

DoD CIO Kirsten Davies is suspending plans to ramp up CMMC third-party assessments, as part of a review that casts doubt on ...

Regulatory compliance is a fact of life for most supply chains. A key enabler for a successful organization is to understand the complex regulatory environment and build compliance into their ...

Response to detected offenses (including remediation of harm caused by criminal conduct) and corrective action plans (including assessment and modification of the compliance and ethics program); and ...

To truly be effective, a cybersecurity program must continually evolve and improve. The problem is, many organizations don’t have a clear sense of where they are today and how to improve for tomorrow.

Governance Framework for AI Tax Compliance. Technology alone cannot deliver trusted compliance. A governance framework ...