Quantivate Blog

Check out Quantivate’s most recent resources —You’ll find industry insights and learning resources for your governance, risk, and compliance (GRC) program, covering topics ranging from policy management and internal audit to vendor management and cybersecurity. Policy & Document Management Best Practices Playbook Explore practical tips for building an effective policy management program for each stage of the policy lifecycle, from development and approval to publishing, attestation, reporting, and more. Get your copy of this…

With today’s rapidly changing risk and regulatory landscapes, internal audit is playing an increasingly important role in organizations’ governance, risk, and compliance (GRC) efforts. However, a recent report from the Institute of Internal Auditors (IIA) reveals that many businesses struggle with aligning internal audit functions to key risk areas. (more…)

Effective vendor management is a significant undertaking. From due diligence and contract reviews to performance tracking and ongoing monitoring, maintaining reliable third-party relationships requires a structured framework for vendor management. Review some of the key steps of a successful program with this list of common vendor management terms and concepts. (more…)

Remember the old Smokey the Bear adage, “Only you can prevent forest fires”? Well, it certainly seems true in the case of USAA Bank being hit with cease-and-desist proceedings for engaging in unsafe or unsound banking practices (“consent order”). I have always believed that it is more cost-efficient and a better business model to prevent the fire than to expend countless resources to continually fight the fire. So, who is the “you” at USAA Bank responsible for the prevention…

Many organizations are zeroing in on IT risk management as an important aspect of their enterprise-wide risk and compliance programs. And for good reason. Technology risk and cybersecurity issues have come to the forefront thanks to recent high-profile cyber attacks and data breaches. But what’s behind the increasing IT risk? Software and systems power more core operations. Technology is embedded into most critical business processes. As a result, technology failures or breaches have wide-ranging…