Risk and Compliance case studies
Risk and Compliance · Put your knowledge to work in context.
The ICA Certificate in Risk and Compliance is a professional qualification offered by the International Compliance Association (ICA), a body that describes itself as the leading professional body for the global regulatory and financial crime compliance community and states that it has trained over 190,000 professionals and serves more than 30,000 members across 155 countries. The credential sits within ICA's Governance, Risk and Compliance subject area, one of the subject areas listed on the ICA site alongside Anti Money Laundering, Financial Crime Prevention, Customer Due Diligence/KYC, Managing Sanctions Risk and Cyber Risk. The Risk and Compliance case studies are 5 cases and about 3,210 words.
1The Vendor Access Renewal That Nobody Owned
Northwind Mutual, a mid-sized insurer, runs an annual access recertification for its 340 third-party vendor accounts. The GRC team sends the campaign on 1 March; business owners must attest by 31 March.
660 words, about 3 min2Risk Appetite Versus a Profitable Exception
Helios Payments has a board-approved risk appetite stating it will accept no more than a 'low' residual risk for customer authentication controls. The product team proposes launching a new peer-to-peer transfer feature in six weeks.
590 words, about 3 min3The Control That Passed but Didn't Work
Cobalt Health Systems runs a quarterly control testing program covering 210 key controls. In Q2, testers sampled 25 access-removal tickets and found 24 completed within the 48-hour SLA, so the control was rated 'effective.' In Q3, an incident review revealed that a terminated administrator retained system access for 19 days and exported 4,000 patient records.
648 words, about 3 min4Concentration Risk in a Single Cloud Provider
Arcadia Retail Bank migrated 78% of its critical applications to one cloud provider over three years, driven by cost savings of $6M annually. The vendor risk register lists the provider as 'Tier 1 - critical' with an annual assessment.
656 words, about 3 min5The Whistleblower Report and the Conflict of Interest
Verity Financial has a whistleblower hotline managed by an external provider. A report alleges that the head of the mortgage division approved loans to applicants with inflated incomes, and that a regional sales director pressured staff to meet volume targets.
656 words, about 3 min