Latest Commentary

Is two-factor authentication a false security?

Two-factor authentication has taken its lumps as a security tool as of late. So the future would appear to be now for alternative security methods. The movement toward this future, however, will take place slowly.

The ERM vs. GRC battle continues

In our industry, people have become accustomed to the ever-raging ERM vs. GRC debate. The conflict rears its head often, with partisans spewing a fair amount of vitriol. But if you were to pin down executives and ask what the distinction really is, you would end up with a lot of muddled answers.

Ace gives up on earnings guidance

It's fair to say that the fundamental premise of earnings guidance has changed significantly over the past few years. It was once a best practice of sorts -- an attempt to inform the market and keep expectations in line. But Reg FD has led to a sea change in thinking in the IR community. And more companies are concluding that continuing to offer guidance simply isn't worth the Reg FD hassles.

California legislators propose sweeping privacy law

California and Massachusetts have been among the states most aggressively passing regulations aimed at privacy protection.

Conflict minerals compliance becomes a reality

For many people, the landmark Dodd-Frank reform law is synonymous with financial reform, one aimed squarely at Wall Street banks. But there were other aspects of the law that affect a broader swath of companies. One of the lesser known provisions had to do with conflict minerals such as tungsten, tin, tantalum and gold, which are often mined in oppressive conditions.

Debate continues over social media as communications channel

The SEC should be applauded for quickly responding to the issue of whether social media outlets can be legitimately used an official channel for corporate communications. It ruled recently that such...

Boards, CEOs more serious about internal audits

Since the passage of Sarbanes-Oxley in 2002, the internal audit function within corporations has slowly taken on greater urgency.

Chief audit executives eye more strategic role

The Holy Grail for a lot of executives without direct P&L responsibility for their companies' main product line is apparently to play a more strategic role. We have heard variations on this theme for years now.

Radical solutions to the breakdown of compliance

Everyone can agree that criminal conduct should not be tolerated, but what's the best way to eradicate it? Some interesting proposals have been bantered about recently in the pages of august law reviews, with two polar extremes emerging.

Change coming for climate-related risk disclosure

When it comes to reporting material risks, there's been a lot of discussion about the extent to which public companies should discuss cyber threats in financial statements. Climate risk is...