The Ultimate Guide to Risk & Compliance
A curated Canadian edition of IndustrialDay news, analysis, interviews, reviews, job moves, and related resources for Risk & Compliance.
What to know about Risk & Compliance
Risk & Compliance is a critical domain encompassing the strategies, tools, and frameworks organisations use to identify, manage, and mitigate risks while ensuring adherence to regulatory standards and internal policies. This area has grown increasingly complex with evolving technology landscapes and cyber threats, making it essential for businesses to stay informed and adaptive.
Recent developments highlight the dynamic nature of risk and compliance, including innovations like AI-powered suites enhancing governance, risk, and compliance (GRC) management, as well as emerging security challenges such as growing API vulnerabilities in financial sectors and the targeting of cloud resources by cyber-attacks. Organisations must navigate an expanding regulatory environment, with new standards and certifications marking benchmarks for data protection, operational resilience, and cybersecurity readiness.
Beyond technology, risk and compliance involve critical considerations around human factors, corporate governance, and the alignment of security practices with business objectives. Insights into cloud governance, supply chain security, and identity management demonstrate the multifaceted approach required to manage risks effectively in a digital-first world.
For readers, exploring stories tagged with Risk & Compliance offers valuable perspectives on cutting-edge solutions, regulatory changes, and strategic guidance. It is an essential resource for professionals aiming to understand and implement robust risk management frameworks, enhance cybersecurity posture, comply with evolving standards, and ultimately safeguard their organisations against the multifarious risks of today’s interconnected environment.
Canadian Risk & Compliance News
Regional stories with direct local relevance
Integrity360 launches managed OT security services
Industrial operators can now outsource continuous protection as the new service set aims to reduce cyber risk without disrupting production.
BDO Canada teams up with ServiceNow on AI governance
Canadian firms struggling to turn AI trials into profit may gain tighter controls as BDO Canada and ServiceNow join forces on governance.
SAP Concur Canada flags grey areas in travel claims
Canadian firms risk slower reimbursements and weaker oversight unless they tighten expense rules around food delivery, lounge access and tips.
Which AI Decisions Should Carry a Human Signature?
A missed safeguard can turn an automated campaign into a customer backlash, and one coupon error shows why humans must sign off on risky AI calls.
Asset Panda launches Canadian data hosting for clients
The move should help Canadian public-sector and regulated customers adopt the asset management platform without moving records, files or backups abroad.
Kyndryl VP: Canadian firms face barriers to modernising for AI
Kyndryl's Umair Dinarwala says Canadian firms have the ambition to modernise, but budgets, resistance to change and capacity hold them back.
Analyst Insights
Research and market analysis connected to Risk & Compliance
Gartner flags 10 tech trends for 2027 as AI governance
Ping Identity named leader in Gartner's new CIAM report
Anthropic adds 11 partners to Claude for financial advisers
Syndigo named leader in Gartner's first PIM quadrant
Which AI Decisions Should Carry a Human Signature?
Featured News
Kyndryl VP: Canadian firms face barriers to modernising for AI
Kyndryl's Umair Dinarwala says Canadian firms have the ambition to modernise, but budgets, resistance to change and capacity hold them back.
How Harvey AI's next generation deals with Canadian data
Canadian law firms can keep client files walled off, while choosing data storage and processing become key topic for AI in law.
Celonis banking head: Banks want proof before scaling agents
Celonis argues frontier AI models are too generic for regulated banking, urging firms to weigh cost, risk and process gains before scaling deployments.
Interview: Cloudera says AI agents reshape zero trust
Enterprises must update identity controls as software agents generate more requests and need tightly time-limited access to sensitive systems.
Exclusive: ABBYY says AI build costs will drive buying
Enterprises could cut AI spend by up to 80% by shifting document workflows away from custom builds and into standard platforms.
Exclusive: ABBYY launches hybrid AI document models
Enterprises under pressure to curb AI risk and cost are being given a hybrid option that blends generative models with OCR and rules-based extraction.
Exclusive: Cloudera builds Hadoop-free future platform
Existing customers get six years of support as Cloudera shifts new AI and analytics workloads to a Hadoop-free platform due in November.
Mimecast CEO: Agentic AI threat novel but not entirely new
Hidden AI risks are already widespread in workplaces, with Mimecast saying users are driving shadow tools and most exposure still starts with people.
AI will fade, says Dell Technologies' ephemeral Chief AI Officer
Dell says agentic AI should shift routine tasks below the machine line, freeing staff for expert work while making the role temporary.
Schrodinger's ERP both dead and alive, says Rimini Street
Businesses can avoid costly ERP rip-and-replace projects by layering AI and automation onto existing systems, Rimini Street says.
Lumana's focus on vertical applications for AI video surveillance platform
Lumana's Principal Product Manager says its camera-agnostic AI platform is expanding beyond security into retail, healthcare and smart cities.
Expert Columns
Digital sovereignty in practice: three examples of balancing control with global reach
Cybersecurity Awareness: The Importance of Getting the Basics Right
Why revenue leaders need a connected commerce chain
The crown jewels of cybersecurity: What can your business not afford to lose
Address-Anchored Identity: Why Data Quality Is the Missing Link in eIDV
6 Steps to Get Property Data Ready for Real Estate Technology
The future of iGaming belongs to operators that can scale trust, not transactions
AI moves fast: are you training your people to use it wisely?
Pragmatic modernisation: The disciplines that transform cloud operations
Data Governance in the AI Era: Why One-Off Projects Fail
Interviews
Interviews and video coverage from the networkRecent Risk & Compliance News
Black Kite adds quantum readiness to supplier cyber ratings
Companies can now see which suppliers are already moving towards quantum-safe encryption, as Black Kite folds the new checks into its cyber ratings.
AppViewX expands Quantum Trust Hub for quantum migration
Security teams gain a standalone tool to map quantum-era cryptographic exposure across certificates, keys and software before 2030 deadlines bite.
Google Cloud pilot automates syndicated loan lifecycle
A proof of concept aims to cut settlement times and reconciliation work in syndicated lending, after modelling a USD $1.945 billion Term Loan B.
Study finds AI can use wrong document despite retrieval
Accuracy can still slip when similar records are nearby, leaving AI systems to answer from the wrong source despite finding the right document.
Sectigo survey shows quantum threat driving PKI change
Most IT and security leaders expect public key infrastructure to need major changes, as 63% worry about harvest now, decrypt later attacks.
Snowflake launches AI control tools for business definitions
The new features let enterprises audit AI agents' access, spending and definitions, as businesses struggle with inconsistent context across systems.
Google launches Gemini training bundles for finance, law
Free courses on Google Skills aim to help finance and legal staff use Gemini for tasks from bond issuance to contract review.
Hippo & Greenlight Re form partnership for MGA programmes
New MGA entrants may now find capital, policy issuance and reinsurance support bundled together through the tie-up, broadening market access.
Hyland launches Teams integration for governed content
It aims to cut the risk of files spreading across chats and channels by keeping regulated documents under existing governance controls in Teams.
Integrity360 launches managed OT security services
Industrial operators can now buy continuous monitoring and response support as Integrity360 expands beyond one-off OT assessments and consulting.
Sectigo study: firms brace for post-quantum PKI shift
Most IT and security teams now expect public key infrastructure to need major changes as quantum-ready cryptography moves from planning to rollout.
Convera warns businesses to brace for FX swings in 2027
Businesses should prepare for wider currency swings in 2027 as competition for capital makes foreign exchange markets harder to predict.
Anglicare Victoria wins TrendAI cybersecurity award
It highlights rising pressure on care providers to protect sensitive client data as cyber incidents grow across Australia's social assistance sector.
CISOs lag on AI governance as board oversight trails
Many large firms still lack clear AI oversight, with just 7% of CISOs at companies above USD $10 billion in revenue owning the governance brief.
JFrog names nine winners of software supply chain awards
The inaugural prizes highlight a wider shift as large enterprises tighten oversight of code, AI models and other assets moving through development pipelines.
Fleet launches AI governance tools for employee devices
IT teams can now track AI tools, token spend and data-sharing on employee devices as Fleet adds oversight features to its platform.
SAP & NTT team up on sovereign cloud for governments
Governments and defence operators could gain tighter control over sensitive systems as the two groups target regulated customers with sovereign cloud services.
Dayforce deepens alliance with Deloitte on payroll tools
The tie-up will add shared go-to-market work and new payroll controls software as employers seek lower-risk HR system upgrades.
Keeper links Tenable findings to instant remediation
Security teams can now fix cloud risks faster, as Keeper's new Tenable link rotates credentials and enforces Just-In-Time access in seconds.
HITRUST adds AI security tools & third-party risk updates
Businesses facing surging AI and supplier reviews now have new HITRUST tools to cut questionnaire burden and tighten certification checks.