Blog

Litigation Risk: The True Test of Your Control Environment

By John Troiano / February 3, 2026

In one recent litigation matter, a company—whose name is intentionally withheld—found itself the subject of litigation following a fraud event that was not attributable to a single failed control, but rather a series of breakdowns across fraud prevention, detection, and response. As the matter progressed through discovery and expert analysis, what initially appeared to be…

Third Party Risk Management (TPRM) is more than security assessments.

By John Troiano / January 21, 2026

A successful TPRM program begins with determining why you need a third party and ends with safely off-boarding third parties. It ensures that the decision to outsource is supported by a business justification and aligns with the corporate strategy. It also requires enforceable contracts, defined service-level agreements (SLAs), and an exit plan to minimize business…