Insights & Resources

Navigate the
current.

Explore the latest GRC & Financial Crimes trends, case studies, and events from the SureStep team.

BLOG

Alert Overload Isn't a Tuning Problem - It's a Structural Failure

Why traditional transaction monitoring models are structurally misaligned with modern financial crime risk

Read more
BLOG

IBM OpenPages 9.1.3 - Elevating GRC with New Visual UX, AI Enhancements, and Productivity-Driven Features

Visual risk mapping, smarter AI integration, and usability upgrades that accelerate enterprise GRC execution

Read more
BLOG

Embedding Project Risk Into the Heart of Non-Financial Risk Management

How early project engagement builds stronger first line practices and enterprise wide risk maturity

Read more
BLOG

Connecting IT Risk and Regulatory Change with ServiceNow IRM

Unifying regulatory change management and IT risk through connected data, automation, and ServiceNow IRM.

Read more
BLOG

When Every Transaction Tells a Story: Tackling the Rise of E-Commerce Fraud and Promotion Abuse

E-commerce has become the engine of retail growth, but it has also become the most fertile ground for fraud.

Read more
BLOG

When Loyalty Becomes Leverage: The New Frontier of Retail Fraud

Loyalty programs were once the crown jewels of customer engagement engines, driving retention and personalized experiences.

Read more
BLOG

When Returns Become Risk: Navigating Retail's Quietest Billion-Dollar Threat

For many retailers, returns used to be a marker of trust, a brand promise that “you can always bring it back.”

Read more
BLOG

Partnering for Impact: SureStep and SAS on the Future of AI-Driven Financial Crime Prevention

Hear from Robert Wright about our partnership with SAS

Read more
BLOG

Rethinking Audit: Two Big Trends Shaping 2026 and Beyond

Leading audit teams are transforming through continuous risk monitoring and automated control assurance.

Read more
BLOG

Practical AI for AML: Three Tips to Make It Work in the Real World

Artificial Intelligence is redefining Anti-Money Laundering—here's how to make it practical, effective, and regulator-ready.

Read more
BLOG

GRC as Strategy: SureStep CEO Michael Gibbs on the CanadianSME Small Business Podcast

SureStep CEO Michael Gibbs joins the CanadianSME Small Business Podcast to discuss how GRC drives global growth.

Read more
BLOG

Simplifying Issues Management with AI

How Operational Risk Managers can accelerate oversight in IBM OpenPages

Read more
BLOG

Focusing on What Matters Most with Impact Scores in BCM

Helping Business Continuity Managers prioritize assessments

Read more
BLOG

AI Risk: Why the “Why” Matters More Than the “How”

How your business decisions impact more than the technology when it comes to risk

Read more
BLOG

Driving Principled Performance: Our Partnership with OCEG

Learn more about Principaled Performance

Read more
BLOG

Continuous Risk Intelligence Meets Advisory Expertise: SureStep + SupplyWisdom

See how SupplyWisdom can connect the dots with your suppliers.

Read more
BLOG

Ready to Try watsonx.governance?

Try our live demo of watsonx.governance

Read more
BLOG

watsonx.governance: Governing AI with Confidence and Clarity

AI is moving from experiments to enterprise-critical tools. But with that shift comes a challenge: how do you govern AI?

Read more
BLOG

AI in Action: How IBM OpenPages and GPT-5 Streamlined Scenario Analysis

We helped a financial institution use IBM OpenPages 9.1 Scenario Analysis with GPT-5 to pre-generate four scenarios.

Read more
BLOG

IBM OpenPages 9.1: Faster Process, Risk, and Control Assessments for Operational Risk Teams

See the latest new features making a difference in Operational Risk teams globally

Read more
BLOG

How SAS AML Powers Smarter Financial Crime Detection

Learn more about how SAS AML solutions can help

Read more
BLOG

Why AML Success Depends on Fast, Flexible Scenario Tuning

How SureStep helps financial services companies stay ahead, faster than before

Read more
BLOG

Three Things to Know About Governing LLMs Today

Governance of LLMs is less about the model itself and more about governing the use case, guardrails, and outcomes.

Read more
BLOG

Model Risk in Focus: How GRC Forge Shapes Stronger Frameworks

How our GRC Forge assessment partners with Model Risk teams for success

Read more
BLOG

Inside a GRC Forge Workshop: Where Conversations Drive Clarity

The real magic of GRC Forge happens in the workshop.

Read more
BLOG

Before the System: Why Strategy Comes First in GRC Transformation

Strategy needs to come first. That's where GRC Forge steps in.

Read more
BLOG

Strengthening GRC in Australia's Community Banks

Australia's small community and customer-owned banks face a growing need for robust GRC frameworks.

Read more
BLOG

Building Strategic Confidence with SAS Model Risk Management

How SAS's MRM capabilities can grow with you, scaling your investment with Viya

Read more
BLOG

Smart AML for Small Banks: Fast, Accurate, AI-Driven

SureStep helps smaller credit unions and banks design, optimize, and manage their AML strategies.

Read more
BLOG

Navigating GRC in Asia-Pacific

SureStep's GRC Forge provides a strategic roadmap for governance, risk, and compliance in APAC.

Read more
BLOG

Continuing Our Progress Toward Net Zero - 2024 Climate Report

SureStep's 2024 Carbon Results

Read more
BLOG

SureStep Announces Strategic Partnership with SAS to Revolutionize Financial Crimes Management

SureStep and SAS join forces to transform financial crimes management with AI-driven solutions.

Read more
BLOG

AML Transformation: From Compliance Burden to Strategic Advantage

How modern AML programs are turning regulatory burden into competitive advantage.

Read more
BLOG

Modern AML Challenges: Are Legacy Approaches Still Effective?

Why traditional AML systems are struggling to keep pace with evolving financial crime.

Read more
BLOG

AI powered GRC Digital Twin with IBM OpenPages

AI has emerged as a game-changer, offering unprecedented opportunities to enhance efficiency.

Read more
BLOG

Empowered Systems Announces Strategic Partnership with SureStep

Learn more about our new collaboration with Empowered Systems

Read more
BLOG

SureStep Celebrates New Milestone

SureStep Celebrates Milestone as Silver IBM Business Partner Specializing in IBM OpenPages

Read more
BLOG

IBM OpenPages Connector for CUBE

Learn about our new connector for CUBE

Read more
BLOG

ServiceNow Connector for CUBE

Learn more about our CUBE connector for ServiceNow

Read more
BLOG

Watch the latest about Automation & AI with SureStep CEO, Mike Gibbs & Chartis

Access the latest video from SureStep & Chartis about how to best leverage Automation and AI in your GRC program.

Read more
BLOG

How Corporate Boards Should Handle Technology Governance

Harvard Law School (HLS) identified risk management as one of the key issues for corporate governance in 2023.

Read more
BLOG

How GRC Is Integral to ESG

Environmental, social, and governance (ESG) is becoming a critical factor for organizations.

Read more
BLOG

SEC Mandates for ESG Are on the Way

Is Your Organization Prepared?

Read more
BLOG

6 Reasons Why ESG Is Integral to Your Business

Let's take a look at what the last few years has thrown our collective way.

Read more
BLOG

Compliance with The Climate Pledge

So, Your Organization Signed the Climate Pledge. What's Your Next Step?

Read more
BLOG

How AI Changed the Way Companies Approach Risk Management

Artificial intelligence has been around since the 1950s, but it wasn't until recent years that companies started to see.

Read more
BLOG

Canadian Consulting Firm Surestep Expands To Singapore

SureStep, a Canada-based company specializing in systems integration & consulting.

Read more
BLOG

Driving value from GRC

In today's fast-changing business environment, an effective GRC programme is increasingly important.

Read more
BLOG

The Future of Artificial Intelligence in Manufacturing

AI is extensively used in gaming, banking, retail, commercial, and government etc.

Read more
BLOG

A Guide to Open Insurance

Insurers face unprecedented challenges as the insurance sector becomes more vulnerable to disruption.

Read more
BLOG

Singapore's Payment Services Act and The Need For A Solid GRC Program

Technology is the catalyst that has been expediting the evolution of different businesses.

Read more
BLOG

SureStep Fortress successfully achieved Singapore FinTech Association Certification

We're excited to announce that we've recently achieved certification by the Singapore FinTech Association.

Read more
BLOG

AI simplified: How financial institutions can use AI for anti-money laundering

A clear, practical look at how AI can elevate AML effectiveness while strengthening regulatory confidence.

Read more
CASE STUDY

Accelerating GRC Operations through SureStep Enhanced Support

How a Global Business Services Provider Reduced Costs and Improved Agility with Expert OpenPages Support on IBM Cloud

Read more
CASE STUDY

Establishing Project Risk Governance in IBM OpenPages

How a Leading Racing and Entertainment Organization Transformed Project Risk Management with a Unified Object Model

Read more
CASE STUDY

Enhancing Risk Assessment Efficiency in IBM OpenPages

How a Global Insurer Simplified Risk and Control Selection to Improve User Experience

Read more
CASE STUDY

Unifying Audit, Risk, and Compliance on IBM OpenPages

How a Global Business Services Leader Streamlined SOX, Audit, and Enterprise Risk into a Single Source of Truth

Read more
CASE STUDY

Accelerating IT Governance Reporting through AWS-Driven Compliance Data Lake

Building a Unified Compliance Data Lake on AWS to Streamline IT Governance Reporting and Deliver Real-Time Risk Insights

Read more
CASE STUDY

Migrating GRC to the Cloud: Modernizing IBM OpenPages for Scalable, Managed Risk Operations

SureStep migrated a Midwest US-based insurance company's on-premises IBM OpenPages platform to SecureGRC on AWS.

Read more
CASE STUDY

Governing Generative AI

Designing a Risk and Compliance Framework for LLM Oversight

Read more
CASE STUDY

Real-Time Critical Data Elements Reporting for Enhanced GRC Insights

SureStep developed a real-time Critical Data Elements (CDE) report for a leading insurer.

Read more
CASE STUDY

Building a Unified Data Lake and Data Warehouse for Enterprise Insights

SureStep designed and implemented a comprehensive Data Lake and Data Warehouse for a global services provider.

Read more
CASE STUDY

Designing a Scalable GRC Data Lake for Enhanced Compliance and Reporting

SureStep delivered a comprehensive data strategy for a global insurer.

Read more
CASE STUDY

Building a Scalable Post-Trade Risk Framework for Global Financial Institutions

SureStep delivered an integrated risk and control framework on IBM OpenPages.

Read more
CASE STUDY

Automating SOX Compliance: Transforming Manual Controls into an Efficient Workflow

SureStep delivered a fully automated SOX control testing system, reducing testing time by 50%.

Read more
CASE STUDY

Leading by Example: Building SureStep's ESG Program from the Ground Up

SureStep leveraged its own expertise to design, implement, and report on a comprehensive ESG program.

Read more
CASE STUDY

Strategic GRC Assessment: Enhancing Risk Management for a Leading Financial Institution

SureStep conducted a comprehensive GRC Forge assessment for a major financial institution.

Read more
CASE STUDY

Modernizing GRC for a Global BPO: From Legacy to a Scalable Cloud Platform

SureStep led the transformation of a global BPO's GRC environment, upgrading IBM OpenPages from 7.2 to 8.0.

Read more
CASE STUDY

Cloud Transformation for Risk Management: Migrating IBM OpenPages to AWS

SureStep led a seamless cloud migration for a major financial services company.

Read more
CASE STUDY

Enhancing Risk Management for Energy Operations: A Multi-Country Framework

SureStep delivered a comprehensive Risk and Control Framework for a global energy company.

Read more
CASE STUDY

Seamless GRC Integration: Bridging Platforms with Custom API Solutions

SureStep delivered a comprehensive integration solution, connecting a global vendor's platform with IBM OpenPages.

Read more
CASE STUDY

Streamlining AML Testing and Compliance Reporting

SureStep developed a unified AML testing and compliance reporting solution using IBM Cognos.

Read more
CASE STUDY

Unifying Internal Audit: A Government-Wide GRC Transformation

SureStep delivered a comprehensive IBM OpenPages solution, consolidating internal audit processes across a Canadian government.

Read more
CASE STUDY

Accelerating Model Risk Governance: Legacy Migration to SAS MRM

SureStep delivered a complex migration from a legacy Model Risk Governance platform to SAS MRM on SAS Viya.

Read more
CASE STUDY

Financial Issue Management

SureStep was engaged to assist with the architecture and systems development for creating a unified financial issue platform.

Read more
CASE STUDY

GRC Managed Hosting/Service

As one of the largest legacy insurance and annuity companies, servicing over 100 of the Global Fortune 500.

Read more
CASE STUDY

Process Optimization

A leading business process outsourcer for transportation and government services in the U.S. engaged us to review and optimize.

Read more
CASE STUDY

Risk Platform Implementation

A world leader in the provisioning of horse racing and betting entertainment is under enormous regulatory pressure.

Read more
CASE STUDY

Taxonomy and Master Records

SureStep was engaged by a leading Life Insurance provider to integrate their two risk management platforms.

Read more
EVENT

SureStep at Momentum 2025

Hosted by Central1, Momentum 2025 is the signature event for credit unions, financial institutions, and fintech innovators.

Read more
EVENT

SAS Innovate on Tour - Sydney

SAS Innovate on Tour in Sydney is a one-day, free-to-attend roadshow for business leaders and technical users.

Read more
EVENT

SAS Innovate on Tour - Singapore

SAS Innovate on Tour in Singapore is a one-day, free-to-attend roadshow for business leaders and technical users.

Read more
EVENT

COBA 2025 - Customer-Owned Banking Conference

COBA 25 is Australia's premier gathering for the customer-owned banking sector.

Read more
EVENT

Join us @ SAS Innovate 2025

SureStep's team of experts will be in Orlando, FL to join industry experts on Financial Crimes and more.

Read more
EVENT

From E-23 to C-27: Exploring the Future of Model Governance

Join us for an insightful webinar where leading experts delve into the evolving landscape of AI governance.

Read more
EVENT

Streamlining Regulatory Change with AI Technology

Streamline regulatory change management with AI. SureStep shows how to efficiently monitor, delegate tasks, and ensure compliance.

Read more
EVENT

Risk Americas Convention — 12th Annual | 23-24 May 2023 | New York City

Join the SureStep team at this year's America's premier financial risk and innovation convention 2023.

Read more
EVENT

Asia Risk Congress 2022

The Asia Risk Congress addresses the latest risk management strategies, financial innovations, regulatory developments.

Read more
EVENT

2022 RegTech Innovation Summit

Fireside Chat | Digital transformation and RegTech, what steps to take to survive and succeed.

Read more
EVENT

2021 RegTech Summit

2021 RegTech Summit: The industrial journey to AI adoption under proper governance.

Read more
EVENT

Asia Risk Congress 2020

Asia Risk Congress Day 2: 10:50 Session

Read more
EVENT

Digital Workshop: Don't Get Derailed by Compliance & Regulatory Risks

Join us for our risk and compliance webinar featuring business management system consultants Anitech Pty Ltd.

Read more

Ready to take the
SureStep forward?

Whether you're navigating a regulatory transformation or building a GRC program from scratch, we'll help you chart the right course.

Schedule a Strategic Conversation