Onspring

09/03/2026

Two third parties. Two very different diligence needs.

A critical third party needs a SOC 2 report date, a BC/DR test date, and an exit plan on file. A low-tier third party doesn't. Add a second condition — does this third party touch personal data? — and you're building sections to fit every combination instead of the actual due diligence.

Now, Field Visibility Outcome (v37.2) does both in one section. Show the fields that matter, skip the sections that don't. Same logic, fewer sections, less scrolling.

09/03/2026

91% of tech leaders struggle with CRM data governance. Yet most don't realize the stakes: regulatory fines, insider risks, inconsistent data, compliance headaches. You need clear standards, defined ownership, controlled access and audit trails that work. We published a guide breaking down four key governance elements and a step-by-step implementation framework.

Whether you're tightening compliance or reducing breach risk, this covers the moves.

Read the full blog ➡️ https://hubs.la/Q04mJqkQ0

91% of leaders struggle with CRM data governance. Discover how to implement standards, controls, and compliance in your platform.

09/02/2026

We're heading to EDUCAUSE 2026!

Join Onspring at booth #1945 during the EDUCAUSE Annual Conference in Denver at the Colorado Convention Center. Discover how our Onspring empowers higher education institutions to simplify compliance, automate workflows, and reduce risk.

See you there!

Register now: https://hubs.ly/Q04vYZ9R0

09/01/2026

Siloed GRC data creates hidden compliance risks that often only surface during a regulatory review. Teams working with incomplete data may miss compliance requirements, reach contradictory conclusions about the same risks and struggle to produce complete audit trails. When regulatory reporting windows are tight (like GDPR's 72-hour breach notification) fragmentation becomes a real problem.

Centralized GRC data transforms this. A single source of truth eliminates duplicate effort, accelerates incident response and ensures audit-ready documentation is always on hand. Organizations that unify their GRC workflows gain real-time visibility, consistent reporting and demonstrable governance.

Read the full blog to understand the hidden risks of fragmented GRC and how centralization strengthens compliance ➡️ https://hubs.la/Q04mFY5S0

Siloed GRC data creates hidden compliance risks most teams don't see until audit time. Learn what's at stake and how centralization fixes it.

09/01/2026

Ready to reconnect with yourself and redefine leadership on your own terms?

Join ISACA Atlanta for SheLeads Tech— a space designed for ambitious women in GRC and tech to cultivate meaningful relationships, have intentional conversations, and expand both personally and professionally.

Whether you're looking to network, find mentors, or simply connect with growth-minded peers who get it, this gathering is for you.

Register today: https://hubs.la/Q04vLhVL0

08/28/2026

AI in compliance is moving beyond recommendations to actual actions.

So, how should compliance leaders set boundaries? Our VP of Platform, Ryan Lougheed, breaks down what you need: clear rules on what AI can do, full visibility into every action, and human oversight where judgment matters.

Read his full piece on The Compliance and Ethics Blog: https://hubs.la/Q04vBcZX0

This website is using a security service to protect itself from online attacks. The action you just performed triggered the security solution. There are several actions that could trigger this block including submitting a certain word or phrase, a SQL command or malformed data.

08/27/2026

State, Local and Education organizations manage hundreds of vendor relationships, often with skeleton teams and shrinking budgets. Manual third-party risk management creates blind spots and burns hours on repetitive tasks. The answer? Automation. Centralized platforms that standardize assessments, enable continuous monitoring and surface risk in real time help SLED teams protect their organizations without expanding headcount. See how automation simplifies vendor risk oversight and scales your TPRM program.

Read the blog: https://hubs.la/Q04mFZBQ0

Automate TPRM to reduce vendor assessment overhead, prevent silos and monitor risk in real time for resource-constrained public sector teams.

08/26/2026

Just one week until Atlanta GRC Day!

Join fellow GRC professionals for practical insights, real-world strategies and valuable networking. Attendance is free, and you'll receive a Certificate of Completion to submit to your CPE governing body.

Reserve your spot today: https://hubs.la/Q04qwX6f0

08/25/2026

The U.S. Federal Register hit a record 106,109 pages of new regulations in 2024. The SEC collected $8.2 billion in penalties that same year-- also a record.

Keeping up with regulatory change isn't a manual process problem. It's a systems problem. Without a structured approach to monitoring, assessing and verifying regulatory updates, compliance gaps are inevitable.

Our latest blog outlines exactly what a regulatory change management program should include and the most common mistakes that leave organizations exposed.

Read more:

Regulatory changes create compliance gaps most teams never see coming. Learn how to build a process that keeps your program audit-ready.

08/24/2026

Denver-area GRC and cybersecurity leaders, join us for GRC Day on September 24th. We're bringing together practitioners for practical conversations on risk quantification, AI-driven operational efficiency, and supply chain cyber risk management, exploring the tools and strategies you need to lead with clarity in your organization.

The day is free to attend, includes lunch and networking, and wraps with happy hour at Oskar Blues Grill & Brew.

Reserve your seat: https://hubs.la/Q04sBv-Z0