Your go-to resources for the leading Ethics and Compliance solutions, featuring expert insights on whistleblower programs, hotline systems, compliance training, business continuity planning, and policy management. Empower your organization to foster integrity, resilience, and regulatory excellence.

Watch this session for a practical discussion on how to evolve your compliance program into a strategic enabler, and how connected compliance enhances resilience, uncovers risk insights faster, and builds trust across stakeholders.

Highlights:
- Learn how to break down silos between risk, compliance, audit, and legal
- Discover ways to link compliance outcomes to organizational resilience strategy
- Discover real-world examples of connected compliance in action
- Learn steps to assess and mature your program using the GRC capability model

Connected Compliance: Aligning Risk, Resilience, and Integrity

In today's digital landscape, a robust cybersecurity plan is crucial for any organization seeking to protect its assets and ensure operational continuity.

In this webinar, we explore the 5 essential pillars of a comprehensive cybersecurity strategy:
1. Prevention: Learn how to construct a cyber-resilient infrastructure to stop potential threats before they occur.
2. Detection: Discover methods to swiftly identify breaches through advanced automated protocols.
3. Response: Understand the importance of cultivating a culture of cyber resilience within your organization to effectively respond to incidents.
4. Recovery: Gain insights into establishing robust backup systems to restore data in the event of encryption or loss.
5. Improvement: Stay ahead of the curve by continuously evolving your cyber strategies to counter emerging threats.

Fortify your organization's cybersecurity posture through these five pillars, ensuring resilience against evolving cyber threats.

5 Pillars of a Defensive Cybersecurity Plan

In the past three years, numerous traumatic events have occurred across various locations in the United States, including Nashville, Uvalde, Parkland, Las Vegas, Northern California, Puerto Rico, Wilmington, Panama City, Charlottesville, Minneapolis, and the U.S. Midwest and Southeast. These events have ranged from natural disasters like wildfires and hurricanes to terrorist attacks, shootings, riots, and protests. Amidst these crises, the COVID-19 pandemic has further disrupted lives, work environments, organizations, and the economy.

While media coverage often focuses on the external impacts, this presentation aims to delve deeper into the psychological stages individuals undergo in response to trauma or stress. But how often have we taken the time to really think about what happens to us as individuals when we experience traumatic or stressful events?

Key Topics:
- Understanding the psychological stages individuals undergo in response to traumatic events.
- Exploring the behavioral responses to crises and the neurological processes underlying them.
- Recognizing the importance of the "human factor" in crisis management and disaster preparedness.
- Gaining insights into how individuals and organizations can better prepare for and respond to crises.
- Enhancing awareness of the impact of traumatic events on individuals, teams, and organizational reputation.

This knowledge will empower those involved in disaster preparedness and crisis management to better support their workforce, clients, and communities, ultimately strengthening organizational resilience in the face of adversity.

Disaster Preparednesss: The Pysychology of A Crisis (Pt. 2)

RegFacts Briefing – July 2025 | Your Monthly Compliance Intelligence

This month’s RegFacts episode covers final rules, action alerts, proposed rules, and information alerts in July — with a 95% compression rate applied to 609 pages of raw regulatory content, condensed into just 33 pages for client review.

July highlights include:

- OFAC Final Rule: Implementing sanctions regulations tied to a February 6, 2025 Executive Order on the International Criminal Court (effective July 1, 2025).
- CFPB Small Business Lending Rule: Compliance dates extended for Reg B amendments, with tiered deadlines from July 1, 2026 to October 1, 2027.
- CFPB Withdrawals: 67 guidance documents withdrawn — including items related to the Truth in Lending Act, Military Lending Act, Reg E, FDCPA, Reg Z, RESPA, and the Interstate Land Sales Full Disclosure Act (effective May 12, 2025).
- FDIC, NCUA & OCC Joint Order: Allowing financial institutions to obtain taxpayer identification numbers from third parties under CIP (effective June 27, 2025).
- OCC CRA & ECOA Updates: New display requirements for notices and Fair Housing Act posters by October 6, 2025.
- Banking Agencies Joint Statement: Guidance on safekeeping crypto assets (effective July 14, 2025).
- FinCEN Orders: Actions against Mexico-based institutions under the FEND Off Fentanyl Act (effective September 4, 2025).
- FDIC Policy Changes: Withdrawal of proposed rule on parent companies of industrial banks, CRA rollback proposal, and amendments to branch relocation processes.

RegFacts from Mitratech’s Continuity – July 2025

RegFacts Briefing – June 2025 | Your Monthly Compliance Intelligence

This month’s RegFacts episode is packed with need-to-know developments affecting U.S. financial institutions, delivered by Justin Cole, Senior Regulatory Compliance Advisor at Mitratech Continuity.

Our Regulatory Operations Center (ROC) issued 18 RegAdvisor alerts this month — spanning final rules, action alerts, proposed rules, and information alerts — with a 94% compression rate applied to 329 pages of raw regulatory content. 

June’s highlights include:

- CFPB Final Rule: Rescinding internal rulemaking procedures and reaffirming the Federal Register as the system of record (effective June 18, 2025)
- OCC Bank Merger Act Rollback: Presidential disapproval of the 2024 amendment to the Bank Merger Act (effective June 20, 2025)
- FTC Final Rule: Amendment to the Children's Online Privacy Protection Act (COPPA), with compliance required by April 22, 2026
- CFPB Action Alerts: Withdrawal of 24 guidance documents related to UDAAP and Equal Credit Opportunity Act enforcement
- OFAC General License 25: Broad rollbacks of Syrian sanctions (effective May 23, 2025)
- CRA Updates: New list of distressed or underserved middle-income geographies issued by bank agencies & more

RegFacts from Mitratech’s Continuity – June 2025

In any organization, the most valuable assets are its people and data. The safety, security, and protection of employees and sensitive information are paramount, particularly in the aftermath of a global pandemic.

This session focuses on preparing and empowering employees to act as the first line of defense in emergencies, such as evacuations or shelter-in-place situations, and in safeguarding the organization's data against cyber threats.

Key Topics:
- Importance of creating a safe and secure work environment for employees post-pandemic.
- Role of employees in providing the first line of defense during emergencies.
- Strategies for conducting exercises, drills, and training to ensure employee readiness.
- Steps to safeguard sensitive data and protect against cyber threats.
- Significance of maintaining both physical and digital security measures to uphold organizational reputation, protect clients' data, and ensure profitability.

By understanding and implementing these key steps, organizations can enhance overall safety, security, and resilience, thereby safeguarding their most valuable assets—people and data.

Disaster Preparedness: Protecting Your People and Your Data (Pt. 1)

This month’s episode of RegFacts comes to you from just a few blocks away from the ABA Risk and Compliance Conference in Indianapolis. If you’re attending, stop by and visit us at booth #709.

Join Mitratech’s Senior Regulatory Compliance Advisor, Justin Cole, as he delivers a high-level recap of the key federal regulatory compliance developments impacting U.S. financial institutions in May 2025. Topics include:

- The CFPB’s joint motion with trade groups to vacate the rule barring medical debt from credit reports
- The FTC’s 60-day delay of new compliance deadlines under its amended negative option rule
- The CFPB’s rescission of its 2022 interpretive rule on state enforcement powers (effective May 15, 2025)
- The OCC’s interim final rule rescinding the 2024 Bank Merger Act policy statement (comments due June 16, 2025)
- FinCEN’s alert on oil smuggling schemes tied to Mexico-based criminal organizations
OCC’s request for input on community bank challenges in adopting digital banking (comments due June 26, 2025)
- FTC’s amendment to the Children’s Online Privacy Protection Rule
…and more timely regulatory updates

RegFacts Briefing – May 2025 | Live from Indianapolis

In this episode of our RegFacts briefing series, join our host and Mitratech's Senior Regulatory Compliance Advisor for the Continuity Division, Justin Cole, as he takes you through a high-level recap of what our team addressed in September 2024. 

Covered in this episode: 
- The FDIC's issuance on resolution plans and informational filings for large banks
- OFAC's issuance of an interim final rule to amend their reporting procedures and penalties, extending record keeping requirements for certain transactions from five to 10 years
- The FRB's issuance on Regulation A, where they decreased the rate for primary credit at each Federal Reserve Bank by 50 basis points
- The FRB's other issuance on Regulation D, where they decreased the rate of interest paid on balances maintained at Federal Reserve Banks by half a percent (to 4. 9 percent)
- The FTC's issuance on the use of consumer reviews and testimonials, prohibiting specific unfair deceptive acts or practices 
- An action alert based on the sunsetting of the cyber security assessment tool (which will sunset on August 31, 2025) & so much more!

RegFacts from Mitratech's Continuity - September - 2024

In this episode of our RegFacts briefing series, join our host and Mitratech's Senior Regulatory Compliance Advisor for the Continuity Division, Justin Cole, as he takes you through a high-level recap of what our team addressed in August 2024. 

Covered in this episode: 
- The CFPB's final rule on registry of non-banks subject to certain agency and court orders
- The Federal Trade Commission's update that slightly increases the fees charged to entities for accessing the National Do Not Call Registry
- A deposit insurance coverage clarification issued by the FDIC
- The FDIC's final rule related to the Fair Hiring and Banking Act
- The NCUA's issuance succession planning and so much more!

RegFacts from Mitratech's Continuity - August 2024

In this episode of our RegFacts briefing series, join our host and Mitratech's Senior Regulatory Compliance Advisor for the Continuity Division, Justin Cole, as he takes you through a high-level recap of what our team addressed in May 2024. 

Covered in this episode: 
- The United States Supreme Court ruling on the CFPB's funding mechanism
- The Federal Reserve Board and the CFPB's updates to the regulation CC thresholds coming into effect July 1st, 2025
- The FTC's Telemarketing Sales Rule
- The FDIC, Federal Reserve Board, and OCC's published final regulatory reporting changes relating to the call reports and FFIEC 002
& 26 regular advisor alerts published and reviewed by our team!

RegFacts from Mitratech's Continuity - July 2024

Managing IT incidents and running disaster recovery exercises can be complicated and rife with challenges. Teams struggle to communicate without a lot of in-person meetings or emails which inevitably mean that recovery takes longer than it should. Exercises are difficult to track and report on to auditors.
Join us as we share:

Why the IT/DR market is so important to your business success
Best practices for managing IT disaster recovery incidents
Why Mitratech invested in incident and exercise management for IT/DR
How Mitratech's IT/DR Incident Manager streamlines incident response

How to Manage IT Disaster Recovery Incidents

Every year, thousands of workers face the threat of workplace violence. These incidents can happen anywhere and anytime, underscoring the importance of having a safety plan in place for your employees. Establishing a response strategy for violent situations is paramount for ensuring preparedness and safeguarding your organization's employees.

In this webinar, we delve into various aspects essential for addressing workplace violence effectively:
- Evolving trends in workplace violence
- Identifying warning signs
- Strategies for proactive preparedness and responding to active threats
- Addressing workplace violence FAQs

Watch now to enhance your organization's readiness in preventing and managing violent incidents in the workplace.

How to Build a Robust Workplace Violence Prevention & Response Strategy

Is your organization's IT disaster recovery plan integrated into your continuity program?

An IT/DR plan will ensure business continuity by bringing together continuity professionals and your IT team to help minimize data loss in the event of a disruption, such as cyber attacks or natural disasters. This plan helps quickly restore critical systems and reduce downtime, protecting your operations and reputation.

What you will learn:
- Aligning Technology with Business Priorities: Learn to sync technology recovery with business goals.
- Building a Strong DR Foundation: Base recovery plans on RTOs and key technologies.
- Focusing on Critical Needs: Prioritize recovery on what's most important.
- Unified Management of BC and DR: Integrate continuity and recovery in a single framework.

4 Reasons to Integrate Disaster Recovery and Continuity Planning

Tune into part two of our expert webinar series on navigating ethical dilemmas and fostering better transparency, where we explore:   
- The definition and importance of whistleblowing
- Different types of whistleblowing: internal vs. external, anonymous vs. open
- An in-depth analysis of major whistleblowing scandals
- The repercussions of whistleblowing gone wrong
- Practical steps to effectively handle whistleblowing and avoid common mistakes

You’ll walk away with:
- A comprehensive understanding of whistleblowing and its impact
- Historical examples to better navigate ethical dilemmas
- Strategies to protect yourself and your organization
- Enhanced knowledge of legal frameworks and support systems for whistleblowers

Don’t miss this opportunity to elevate your understanding of whistleblowing and equip yourself with the tools to manage it effectively within your organization. Watch now.

Global Whistleblower Series Part 2: Risks and Best Practices

Ethics

Compliance

hotline

whistleblower

Best Practice

Reporting

Increasing expectations for good governance, effective risk management and complex demands for corporate compliance are presenting a growing challenge for organizations of all sizes. Join industry thought leaders as they provide you with practical advice on how to implement successful risk and compliance management strategies across your organization. Browse risk management resources in the form of interactive webinars and videos and ask questions of expert GRC professionals.

IT Governance, Risk and Compliance

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

Global Whistleblower Series Part 2: Risks and Best Practices

Presented by

About this talk

Mitratech Ethics & Compliance