In this blog we keep you up-to-date and inform you with the news and trends in governance, compliance and risk
First line of defense risk management
8 min readThe first line of defense owns the risk but rarely acts like it. Here is what passive first-line ownership looks like and what makes accountability real.
Risk register mistakes
9 min readHaving a risk register and actually managing risk are two different things. Here are ten risk register mistakes and how to avoid them.
Infrastructure project risk management
10 min readMost infrastructure cost overruns are rooted in early-phase decisions. Learn why early-phase risk management determines project outcomes.
Risk Companion features explained: risk register, AI assistant, bow-tie diagrams, Monte Carlo simulation and reporting, built for teams that manage risk every day.
GRC framework
9 min readGRC framework explained: what governance, risk, and compliance really means in practice, why siloed approaches fail, and how integration changes outcomes.
NIS2 compliance
9 min readNIS2 compliance is a documentation challenge, not just a technical one. Learn how a risk management tool builds the evidence trail regulators will demand.
Spreadsheets and legacy GRC tools fail infrastructure teams. Here's why Risk Companion is built for complex, distributed risk management at scale.
Risk matrix
9 min readThe risk matrix is everywhere. It is also widely criticised. An honest look at what it gets right, where it fails, and how to use it better.
ISO 27001 risk management
9 min readISO 27001 risk management explained: how it connects to ISO 31000, ISO 27005, and your enterprise risk programme, and why running them as silos costs you.
Most small business owners do risk management every day without calling it that. Here's how to turn that instinct into a process that actually protects your business.
Monte Carlo simulation risk management
10 min readMonte Carlo simulation in risk management explained without maths. Understand the outputs, ask the right questions, and use probabilistic analysis confidently.
Risk appetite
9 min readRisk appetite is widely misunderstood. Learn what it really means and why so few organisations define it in a way that actually works.
TPRM geopolitical
9 min readTPRM geopolitical risk is a live issue for energy and industrial companies. Here's how to assess supplier exposure and act before the next disruption hits.
Risk Session
7 min readA risk session only works if the right people contribute. Learn how to structure collaborative risk sessions that feed directly into your risk register.
Board risk reporting
9 min readMost board risk reporting either overwhelms directors or reassures them. Here's what genuinely useful board risk information looks like and how to produce it.