Insights

Regulatory change comes up in most conversations I have with compliance and risk teams. Not whether a process exists; most organisations have one. The real question is whether it is working the way it should. At a basic level, it is simple. Track what is coming, decide what applies, and update your controls and processes. That should, in theory, keep organisations ahead of change. It often does not. Most teams have the process; the challenge is how it is used Scope expands