International network for women in Governance, Risk, Internal Control and Compliance
The Three Lines Model moved the conversation from defence to value. What does that mean for how risk, compliance and internal audit work together?
Read more: The three lines, revisited: why collaboration beats separationThe AI Act applies in stages. Control functions do not need to wait for every guideline to start building the foundations.
Read more: Getting ready for the EU AI Act: a starting point for control functionsToo many risk appetite statements are approved once a year and never consulted again. A few design choices make them part of real decisions.
Read more: Risk appetite that boards actually useAs sustainability reporting becomes mandatory and subject to assurance, control professionals have a central role to play.
Read more: Sustainability data needs the same rigour as financial dataNew European rules make management bodies accountable for cyber risk. These five questions help directors move beyond technical updates.
Read more: Five questions boards should ask about cyber resilienceTechnical expertise earns a seat at the table. Influence keeps it. Practical habits for the move from expert to trusted adviser.
Read more: From specialist to leader: building influence in a control functionHaving a whistleblowing channel is a legal requirement for many organisations. Getting people to use it is a matter of trust.
Read more: Speak-up programmes people actually trustData protection by design and by default is a legal requirement under the GDPR. Effective privacy teams turn it into everyday habits.
Read more: Privacy by design in practice: five habits of effective teams
