RSS Feed
Thursday, January 1, 2026
Iratxe Gurpegui

Policies compliance: a practical checklist

Policies are where intent becomes behavior. Yet in many mid‑market companies, they sit in shared drives, rarely read and even less measured. Regulators now expect evidence that policies are risk based, understood, embedded in workflows and tested over time.

Tuesday, December 30, 2025
Iratxe Gurpegui

When to hire compliance consultants

If you lead compliance in a company, there will be moments when external help is not a luxury but a risk reducer.

Saturday, December 27, 2025
Iratxe Gurpegui

Corruption risks of interaction with public officials

Interactions with public officials are where anti‑corruption programs are most often tested. The combination of discretionary power, time pressure for permits or customs, and the use of intermediaries creates an elevated risk environment.

Friday, December 26, 2025
Iratxe Gurpegui

Subcontractors risk assessment.

Subcontractors extend your operations beyond your walls, which is why they extend your risk profile too.

Thursday, December 25, 2025
Iratxe Gurpegui

Lessons learned whistleblowing - speak-up culture

A speak‑up channel without a speak‑up culture is a liability. In 2025, most mid‑size companies have hotlines and inboxes, yet many still struggle with low usage, slow triage, and fear of retaliation.