Remove risk-management-and-compliance
article thumbnail

What The SEC Missed, But The NYDFS’s Cybersecurity Rule Got Right, About Third-Party Risk

Forrester eCommerce

Last year, when the SEC published its proposed rule on cybersecurity risk management, I was in love! For an analyst who covers risk and compliance, there’s nothing quite like an independent federal agency putting out a rule change with teeth, especially on a […]

article thumbnail

Traceability is the Foundation of Supply Chain Due Diligence

Retail TouchPoints

In December 2023, the European Parliament and the European Council reached a provisional agreement on the Corporate Sustainability Due Diligence Directive (CSDDD), a sweeping law that mandates companies to actively monitor and rectify any human rights and environmental risks within their global supply chains.

Supplies 270
Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

Shopify’s Double-Edged Sword: Tackling Accounting Complexities with Automation

Retail TouchPoints

But despite its effectiveness in streamlining and increasing sales, the platform’s approach to financial reporting creates a maze of manual entries, and even possible risks of misstating key revenue figures. Shopify, originally a beacon for small and medium-sized enterprises, is now expanding its reach to larger corporations.

article thumbnail

Free Doesn’t Mean Free: Explore AI Solutions Safely and Productively for Your Business

Retail TouchPoints

Amidst the availability of free or low-cost options, SMBs must navigate potential risks thoughtfully to safeguard their interests, protect consumer privacy and uphold ethical standards. Q: When considering AI solutions for their ecommerce strategies, what precautions should SMBs take to ensure protection against potential risks?

article thumbnail

GRC Platforms: What You Need To Know Before You Buy

Forrester eCommerce

Businesses always need to adapt their operations to changing circumstances, and the pandemic has only exacerbated the need to rethink risk management strategies. COVID-19 has simultaneously highlighted the necessity of risk management and exposed the gaps that exist in many governance, risk, and compliance (GRC) programs today.

article thumbnail

The Cybersecurity Impact of PCI DSS 4.0

Retail TouchPoints

Enter the Payment Card Industry Data Security Standard (PCI DSS): the gold standard of compliance for all businesses that store, transmit and process cardholder data, intended to improve the security of sensitive user data. retail organizations should remember that compliance is only the beginning of their cybersecurity journey.

article thumbnail

GRC And IAM — Better Together

Forrester eCommerce

Governance, risk, and compliance (GRC) and identity and access management (IAM) are two separate disciplines with different reporting structures and distinct goals.