Compliance, AML & ethics
Evaluation of Corporate Compliance Programs
The questions U.S. prosecutors ask to judge whether a company's compliance program really works — updated in September 2024.
AI & technologyNIST AI Risk Management Framework (AI RMF 1.0)
A free, voluntary framework to govern, map, measure and manage AI risks — widely used as a practical AI control baseline.
AI & technologyNIST Cybersecurity Framework (CSF) 2.0
The most widely used free cybersecurity framework, now with a Govern function — the common reference for auditing cyber risk under the IIA Cybersecurity Topical Requirement.
Compliance, AML & ethicsOFAC Sanctions List Service (SDN and Consolidated Lists)
The official source for U.S. sanctions lists and the free OFAC search tool — the starting point for testing sanctions screening in any group with U.S. dollar or U.S. links.
Procurement & third partiesProcurement Collusion Strike Force (PCSF) — Red Flags and Resources
The U.S. DOJ team that fights bid rigging in public buying — its free red-flag materials and real cases help auditors spot collusion in any tender process.