RSS Feed
Thursday, February 26, 2026
Iratxe Gurpegui

Policy management that auditors can test and trust

Most policy libraries fail in the same moment: when an auditor asks, “show me which version applied on that date, who approved it, who it applied to, who acknowledged it, and how you know it changed behavior.

Tuesday, January 6, 2026
Iratxe Gurpegui

Risk assessment vs management: what's the difference?

In compliance, people often use “risk assessment” and “risk management” as if they were interchangeable.

Saturday, December 27, 2025
Iratxe Gurpegui

Corruption risks of interaction with public officials

Interactions with public officials are where anti‑corruption programs are most often tested. The combination of discretionary power, time pressure for permits or customs, and the use of intermediaries creates an elevated risk environment.

Friday, December 26, 2025
Iratxe Gurpegui

Subcontractors risk assessment.

Subcontractors extend your operations beyond your walls, which is why they extend your risk profile too.

Friday, December 5, 2025
Iratxe Gurpegui

Antitrust risk handling in the telecommunication sector

Telecommunications markets sit at the crossroads of heavy regulation and fierce rivalry. That mix creates unique antitrust exposure that sector rules do not fully neutralize.

Next