Articles
AI system inventory: what to include and how to find the AI nobody has declared
What an AI system inventory is, what counts as AI under the AI Act, where to find the AI missing from the list, what to…
Read moreResource Center
Discover how our free resources help your organization ensure compliance, automate processes and improve resilience.
Articles
Fundamental rights impact assessment (FRIA): who has to carry it out and how
What the FRIA under Article 27 of the AI Act is, who has to carry it out, what it must include, how it fits with the GD…
Read moreArticles
Digital Omnibus on AI: what changes in the AI Act and the new timeline
Regulation (EU) 2026/1744 postpones the AI Act high-risk obligations to 2 December 2027 (Annex III) and 2 August 2028 (…
Read moreArticles
Enterprise risk management (ERM) system: what it is and how to implement it
What an enterprise risk management system is, what it is made of, when to use ISO 31000 or COSO ERM, what regulation re…
Read moreArticles
TISAX labels: which one you need and which assessment level (AL2 or AL3)
Which TISAX label your customer is asking for, which level each one requires (AL2 or AL3), why AL1 does not count and w…
Read moreGRC FAQFrequently asked questions
What we get asked most about GRC software
Plain answers on integrations, implementation, return, risk and data security in GlobalSuite®.
Download the guideComplianceCompliance management system
Monitoring a compliance management system with GlobalSuite®
Every requirement of a compliance management system, from scope to audit, run in GlobalSuite®.
Download the guideAI ActRegulation (EU) 2024/1689
Fundamentals of the EU Artificial Intelligence Act
Deadlines, roles, risk categories, fines and first steps to prepare for the AI Act.
Download the guideTPRMThird-Party Risk Management
How a TPRM Software Can Transform Third-Party Risk Management
What third-party risk is, what a TPRM tool should do and three real use cases.
Download the guideDORARegulation (EU) 2022/2554
DORA Compliance: Prepare Your Business with These 5 Key Pillars
The five DORA pillars, a seven-point checklist and the standards that help you comply.
Download the guideBIAISO 22301 · Business Impact Analysis
How to Conduct a BIA (Business Impact Analysis)
Prerequisites, impact types, MTPD, RTO, RPO and MBCO, and how to consolidate the results.
Download the guideGRC ROIThe return on GRC software
Multiply ROI with a GRC tool
A study with real figures on what GRC software saves in risk, compliance and improvement.
Download the guideCISOInformation Security Manager
The five management challenges for the Information Security Manager
Five real challenges from the CISO's working day and how to tackle each one.
Download the guideKRIKey Risk Indicators
4 essential KRI types in your risk map
Four key risk indicators with alert thresholds for third-party, compliance, operational and strategic risk.
Download the guideRisk analysisISO 31000 · Step by step
How to carry out your risk analysis
A tested risk analysis method: elements, risks, controls and results, with practical exercises.
Download the guideRiskRisk management with GlobalSuite®
How to use GlobalSuite® to manage your risks
One common framework for every risk analysis, and the time each new analysis saves.
Download the guideCrisisISO 22301 · Business continuity
Business Continuity: Crisis Management with GlobalSuite®
Causes, impacts, prevention, the crisis committee and communication, phase by phase.
Download the guideGDPRRegulation (EU) 2016/679
Manage your GDPR compliance with GlobalSuite®
Record of processing, DPIA, DPO, data subject rights, breaches and audits under the GDPR.
Download the guideArticles
Risk taxonomy: what it is, how to build one and an example
What a risk taxonomy is, how many levels it needs, how to start from the Basel and ORX event types and why causes, even…
Read moreArticles
Inherent risk and residual risk: the difference and how to calculate them
What inherent risk is, what residual risk is and how each one is calculated, with a worked example, the mistakes that d…
Read more