Insights for GRC professionals

Credit Union Risk Advisory Service Achievements So Far in 2025

Discover how 65 credit unions are leveraging our Risk Advisory Service to navigate operational challenges, regulatory changes, and emerging risks through collaborative peer learning and expert guidance.

How to Respond to a Data Breach – A DPO Guide

Master the eight critical steps for responding to personal data breaches under GDPR, from initial assessment and risk evaluation to notification requirements and documentation obligations.

Carbon Accounting – I've Calculated My Emissions

Learn how to effectively report your calculated emissions using recognised frameworks like CDP, TCFD, and GRI while demonstrating transparency and driving meaningful sustainability progress.

All Insight Articles

Jun 24, 2025

DORA – Can We Go Back to Sleep Now?

Explore the five pillars of DORA compliance and discover why financial entities must maintain ongoing vigilance in ICT risk management, incident response, and operational resilience.

Jun 18, 2025

NIS2 Transposition – Why Are We (Still) Waiting?

Examine the delays in NIS2 transposition across EU Member States and learn why organisations shouldn't wait for national legislation before beginning their cybersecurity compliance preparations.

May 16, 2025

Sustainability – Objective Measurement

Balance optimism with realism in carbon emissions tracking by measuring both challenges and progress toward the 2030 and 2050 global climate objectives using meaningful metrics.

Compliance Monitoring

May 7, 2025

Evolving Credit Union Supervision

Understand how the Central Bank of Ireland's consumer-centric supervision approach prioritises proactive risk management and learn how credit unions can demonstrate embedded compliance frameworks.

Apr 15, 2025

9 Essential Components of a Third-Party Risk Management Programme

Master the nine critical elements of effective third-party risk management, from governance and due diligence to incident response and continuous improvement strategies.

Compliance Monitoring

Mar 4, 2025

How Incidents Link to Controls

Discover how preventive, detective, and corrective controls work together to prevent incidents, enable rapid detection, support effective response, and drive continuous improvement.

Jan 17, 2025

Digital Operational Resilience Act (DORA): A New Era Begins

This is the short description of the article that will be used in the article, and in the article card itself.

Oct 31, 2024

Volunteer Succession Planning – 'Tomorrow' Has Arrived

Explore the urgent succession planning challenges facing Irish credit unions as service limits and competency requirements transform volunteer recruitment from a future concern into a pressing strategic priority.

Jul 31, 2024

Are You Doing Control Testing in Your Organisation?

Learn the two-phase approach to control testing—design effectiveness and operating effectiveness—that demonstrates to regulators and stakeholders that your key controls actually work.

Operational Risk Management

Jul 24, 2024

Minimum Competency Code – 'And Miles to Go Before I Sleep'

Learn how Irish credit unions can prepare for the October 2024 expansion of the Minimum Competency Code to all lending and deposit activities with our comprehensive step-by-step compliance guide.

Jul 16, 2024

Ten Things to Learn from Managing an Incident

Transform risk incidents into growth opportunities by embracing ten essential lessons covering communication, rapid response, leadership, root cause analysis, and resilience building.

May 14, 2024

Navigating Risk: A Strategic Approach to Risk Management

Master seven essential steps for strategic risk management, from identifying and assessing risks to cultivating a risk-aware culture and integrating risk into decision-making.

ESG, Climate & Sustainability

Apr 30, 2024

Navigating Delegate Oversight – A Balancing Act

Overcome the top ten challenges of fund management delegate oversight, from regulatory compliance and due diligence to data security, conflicts of interest, and performance monitoring.

Jan 29, 2024

Climate-Related & Environmental Risk Assessment Guide

Access our comprehensive guide helping Risk Management Officers assess climate and environmental risks within strategic plans and develop appropriate KPIs and scenario testing frameworks.

Dec 13, 2023

Learning Lessons from Incidents

Adopt a 'Just Culture' approach to incident management where reporting is encouraged, mistakes become learning opportunities, and organisations emerge stronger from every event.

ESG, Climate & Sustainability

Nov 17, 2023

6 Things You Need to Know About the Individual Accountability Framework (IAF)

Understand Ireland's new accountability framework covering SEAR, Conduct Standards, enhanced fitness and probity requirements, and what in-scope firms must do before July 2024.

Nov 8, 2023

ESG and Sustainability Reporting

Trace the evolution from financial to sustainability reporting and understand how mandatory frameworks like CSRD are reshaping corporate disclosure on environmental and social impact.

Aug 1, 2023

From Risk Capacity to Risk Appetite

Learn how understanding your organisation's risk capacity—shaped by capital, reputation, and operational capability—enables confident setting of appropriate risk appetite levels.

Jun 19, 2023

Digital Operational Resilience for the Financial Sector Act (DORA)

This is the short description of the article that will be used in the article, and in the article card itself.

Jun 9, 2023

8 Things to Consider in a Data Breach Response

Navigate GDPR breach response requirements with this practical guide covering preparation, rapid action, stakeholder communication, risk assessment, notification obligations, and documentation.

May 26, 2023

Dark Patterns

This is the short description of the article that will be used in the article, and in the article card itself.

Mar 16, 2023

Changes to ISO 27001

This is the short description of the article that will be used in the article, and in the article card itself.

Feb 10, 2023

Top Cyber Risks in 2023

Prepare for evolving cyber threats including sophisticated ransomware, phishing attacks, cloud security breaches, IoT vulnerabilities, and AI-powered attacks with robust mitigation strategies.

Jan 30, 2023

10 Things to Ask When Outsourcing or Choosing a Supplier

Evaluate potential suppliers and outsourced functions with ten critical questions covering policies, security, disaster recovery, insurance, track record, regulatory compliance, and concentration risk.

Oct 21, 2022

How to Prepare for Cyber Attacks

Strengthen your cyber defences against spoofing, phishing, and watering hole attacks by enforcing security policies, training staff, conducting due diligence, and monitoring adherence.

Aug 26, 2022

What Is Operational Resilience?

Learn how operational resilience prepares organisations to withstand disruptions through risk identification, incident management, business continuity planning, and recovery strategies.

Aug 8, 2022

Featured Risk and the Failure to Establish a Risk-Conscious Culture

Explore how tone at the top shapes organisational culture, establishes behavioural boundaries, and protects reputation through clear values and zero tolerance for unethical conduct.

Jun 17, 2022

What Is Good Governance?

This is the short description of the article that will be used in the article, and in the article card itself.

May 10, 2022

Incident vs Crisis

Distinguish between incidents and crises, understand when escalation occurs, and master the eight principles from CEN/TS 17091 for effective crisis management response.

Apr 14, 2022

Operational Resilience vs Business Continuity

Understand the critical distinction: business continuity plans for disruptions while operational resilience focuses on outcomes, requiring agility, risk management, and continuous service delivery.

Mar 3, 2022

10 Key Steps to Getting Operational Resilience Off the Ground

Build operational resilience from foundation to maturity by identifying critical services, assessing risks, developing response plans, testing regularly, and managing third-party dependencies.

May 5, 2021

The Five Pillars of Operational Resilience

Build comprehensive operational resilience through five interconnected pillars: risk management, information security, incident management, business continuity, and disaster recovery.

Apr 9, 2021

10 Things You Should Know About Operational Resilience

Master the fundamentals of operational resilience including its relationship to risk management, the four essential abilities, impact tolerance levels, and maturity progression.

Compliance Monitoring

Nov 11, 2020

CBI Thematic Review – Fund Management Companies' Governance

Discover the Central Bank of Ireland's findings on governance gaps in fund management companies and learn the critical improvements needed to strengthen oversight and operational resilience.

Jul 3, 2020

10 Things to Consider When Drafting Your Remote Working Policy

Establish effective remote working arrangements by addressing eligibility, approval processes, workspace standards, equipment requirements, performance monitoring, and security protocols.

Jun 22, 2020

Doing Control Testing in Your Organisation

Implement robust control testing programmes using design effectiveness and operating effectiveness assessments to demonstrate control reliability to boards, regulators, and auditors.

Jan 31, 2019

Europe Will Miss the Enormous Regulatory Input of the UK After Brexit

Examine how Brexit removes the EU's largest English-speaking contributor to regulatory development, potentially affecting the balance of legislative innovation across Europe.