ProcessUnity’s State of Third‑Party Risk Assessments 2026, conducted with the Ponemon Institute, surveyed 1,465 risk leaders and found a stark disconnect between confidence in TPRM programs and actual breach outcomes. Respondents report an average of 12 third‑party breaches per year despite claiming strong program effectiveness. The study highlights persistent manual processes, lengthy vendor response times, and a lack of measurable metrics, especially in financial services and technology sectors. AI adoption is emerging, with half of organizations already using it to accelerate assessments.
Capgemini released a whitepaper outlining perpetual KYC, a shift from periodic, manual reviews to near‑real‑time, event‑driven monitoring. Early adopters report 20‑40% fewer false positives, 40‑60% faster onboarding, and 50‑70% reduction in case backlogs. The proposed pKYC triad blends data modernization,...
Public companies are increasingly inflating AI capabilities to attract investors, a practice dubbed AI‑washing that has sparked a surge in securities fraud litigation. Recent cases such as Opendoor and Upstart illustrate how exaggerated AI claims led to false statements, stock...
Jim DeLoach’s article revisits 14 timeless risk‑oversight principles, urging leaders to refresh them with today’s digital capabilities. He stresses that avoiding risk is itself a risk, and that AI, machine learning, and real‑time data can dramatically improve early‑warning systems. The...
Activist investors intensified pressure on U.S. companies, with push‑to‑sell campaigns rising 29% in 2025, reaching a five‑year high. More than 30 firms encountered shareholder resistance to M&A deals, while overall activist activity modestly declined to 579 targets. Concurrently, private‑equity firms...
In February 2025 the U.S. designated six Mexican drug cartels as foreign terrorist organizations, extending material‑support statutes and national‑security enforcement to any company dealing with them. The DOJ’s new guidelines prioritize terrorism‑finance violations, while FinCEN’s geographic targeting orders have already...
Boards and senior leaders are confronting a growing dilemma: critical AI systems supplied by foreign vendors operate as opaque black boxes, delivering efficiency while limiting auditability. Ethicists Vera Cherepanova and Brian Haman argue this is fundamentally an ethical issue of...
Sphinx announced a $7 million seed round, led by Cherry Ventures with participation from Y Combinator, Rebel Fund, Deel Ventures and Singularity Capital. The San Francisco‑based startup builds browser‑native AI agents that embed directly into existing case‑management systems, third‑party portals and internal dashboards...
The EU will introduce a unified anti‑money‑laundering regulation (AMLR) and the sixth AML directive on July 10 2027, replacing the patchwork of national transpositions of the fifth directive. Until then, companies must continue to meet divergent local UBO reporting and due‑diligence rules...
Recent SEC enforcement actions have spotlighted ineffective internal controls over financial reporting, emphasizing approval workflow and reconciliation gaps. Experts argue that robust control environments, paired with knowledgeable teams, shift compliance from a reactive task to a predictable process. As organizations...
Ground Truth Intelligence released a whitepaper outlining the Department of Justice’s refreshed FCPA enforcement agenda after a 180‑day pause and June 2025 guidance. The DOJ is shifting resources toward corruption that threatens U.S. national security, economic competitiveness, and organized‑crime links,...

LRN’s 2026 Ethics & Compliance Program Effectiveness Report, based on more than 2,500 respondents across 26 industries, reveals a widening gap between high‑impact and average programs. While AI and data‑analytics adoption is expanding, many firms lack the governance and measurement...

The Department of Justice (DOJ) is openly deploying AI tools—such as cryptocurrency tracing, financial anomaly detection, travel‑pattern analysis, and intake triage—to boost white‑collar investigations. At the same time, the DOJ’s enforcement agenda warns that companies must govern their own AI...