CERRIX vs ServiceNow: GRC software compared across features, pricing, and compliance

CERRIX vs ServiceNow: GRC Software Compared Across Features, Pricing, and Compliance (2026)

AI in GRC: beyond the hype. What actually works at every level of adoption

Key takeaways from the CERRIX panel on AI in GRC, with practitioners from CERRIX, AuditAgent and 8weeks.co sharing what actually works.

Top European GRC tools in 2026: An insider's comparison

This blog compares the top GRC platforms available to European organizations in 2026

What Does GRC Look Like in 2030?

By 2030, AI in GRC will automate evidence collection, control monitoring, and routine reporting across all three lines of defense, shifting risk managers from administrative work to strategic advisory roles

The Complete GRC Chain: Connecting Regulatory Change Management, Risk, and Controls in One Platform

The future of Governance, Risk & Compliance (GRC) lies in connecting regulatory change management directly to risks, controls, incidents, actions, and assurance activities in one integrated platform.

Embedding automation into your risk operating model: Where AI fits and how to make It work

This second part focuses on what makes that automated model intelligent. Where AI fits. What it means for risk professionals in practice.

From checkbox to continuous: How to embed automation into your risk operating model

What it means to truly embed automation into the risk operating model: what changes, what stays the same, and what it takes to make it work in practice.

Why CERRIX acquired Ruler, and what it means for the future of GRC

CERRIX acquires Ruler to connect regulatory change with risk management.

Why Data Quality Is the Foundation of AI and Automation in GRC

A strategic look at why structured data in a GRC tool is imperative for automation, AI enabled workflows, and real time risk insights.

Internal Control Framework Challenges: Why COSO and ISO 31000 Implementations Struggle in Practice

Why do internal control framework implementations (COSO, ISO 31000) struggle? Explore common challenges in process design, ownership, tooling, and governance

Control Assurance Explained: How Organizations Move from Control Testing to Continuous Monitoring

Discover how modern control assurance moves beyond periodic testing to continuous monitoring, with clear ownership, automation, and expert opinion.

Incident Management under DORA: What Risk and Compliance Leaders Need to Rethink

Incident Management under DORA: What Risk and Compliance Leaders Need to Rethink

Hoe u ISO 31000 Risicobehandeling in de Praktijk Toepast: Inzichten voor Risk- en Complianceleiders

A practical recap of CERRIX ISO 31000 risk treatment webinar

Hoe Wij CERRIX GRC Gebruiken voor het Beheren van Ons ISMS. ISO 27001 in de Praktijk

Wij gebruiken onze eigen CERRIX GRC-software om het ISMS van CERRIX te beheren. Zo maken we van compliance een continu proces en laten we zien hoe ISO 27001 onderdeel wordt van de dagelijkse praktijk.

Hoe bereken je risicokans en -impact?

Leer hoe je risicokans en -impact berekent volgens ISO 31000. Ontdek hoe gestructureerde risicobeoordeling, scoringsmodellen en risicomatrices bijdragen aan effectief risicomanagement met CERRIX.

Why the Three Lines of Defense Model Is Outdated? What Every Board Should Know About the Three Lines Model

Three Lines Model Explained: Why Boards Must Move Beyond 3LOD

What Is ISO 31000 and How Does It Work?

Discover what ISO 31000 is, how it works, and why it’s essential for risk management in 2025. Learn the principles, framework, and how tools like CERRIX help organizations turn ISO 31000 into practice.

How to Write an Incident Report That Stands Up to Audits

Learn how to write incident reports that are clear, evidence-backed, and audit-ready. Includes a template, best practices, and compliance alignment for risk professionals.

How to Implement ISO 31000: Real-Time Risk Decisions with AI‑Enabled Tools

Discover how to move beyond compliance and operationalize ISO 31000 using AI, real-time dashboards, and structured risk assessments. Learn from webinar insights and best practices tailored for financial services and regulated industries.

What’s Blocking Your ISMS Rollout? 7 Fixable Challenges for Financial Institutions

Discover the 7 biggest blockers in ISMS rollout for financial institutions—and how to solve them. Learn practical strategies to secure buy-in, define scope, streamline controls, and prepare for ISO 27001 certification.

Trends Driving ISMS Adoption in 2025: What Risk & Compliance Leaders Need to Know

Discover the top trends pushing organizations toward ISMS adoption in 2025—from regulatory changes and remote work to threat evolution and AI. Learn what to prioritize to stay ahead in risk and compliance.

What Is an ISMS? A Practical Guide for Risk & Compliance Leaders in 2025

An Information Security Management System (ISMS) is more than policy—it’s your organization’s shield against evolving threats, regulation, and reputation risk. Discover what ISMS means, how to implement it, and why it matters in 2025.

The Intelligent Future of GRC: How AI is Reshaping Governance, Risk & Compliance in 2025

Explore how AI is transforming GRC in 2025—from predictive insights and automation to ethical oversight. Learn what features matter, what risks to manage.

How Do You Implement an ISMS in Financial Services Without Slowing Down Innovation?

Implementing an ISMS in financial services? Explore a practical, risk-aligned roadmap tailored for banks, fintechs, and insurers to meet ISO 27001, GDPR, and DORA compliance—without compromising agility.

How Do You Build a Robust ISMS Framework Based on ISO 27001?

Learn how to build a robust ISMS framework aligned with ISO 27001. Discover the key components—people, policies, processes, and controls—to strengthen security and achieve compliance.

When to Conduct Risk Assessments: 6 Enterprise-Critical Moments

Learn when to conduct risk assessments—annual, quarterly, after incidents or change—and how CERRIX ensures continuous compliance.

How do you build a system of quality management that works under ISQM 1?

Learn how to build a system of quality management under ISQM 1. Move beyond compliance to an operational model that proves audit quality.

Top GRC Platforms Compared: Risk Assessment Tools for 2025

Discover the top GRC platforms for 2025 with a focus on risk assessment tools.

What Are Risk Scoring Methods for Financial Institutions? [2025 Guide]

From Risk Assessment to Risk Management: Moving Beyond Checklists in 2025

Understand the evolution from risk assessment to strategic risk management in 2025. Learn why leading organizations are embedding risk into decision-making—and how GRC platforms like CERRIX support this shift.

What is risk management? A strategic guide for leaders in 2025

How Audit Firms Embed ISQM into Daily Practice

In our second ISQM webinar, experts from RSM, Grant Thornton, and CERRIX shared practical insights on how audit firms can embed ISQM into the heart of their operations.

Embedding ISQM 1 into the DNA of Your Audit Firm: A Risk-Based Approach to Quality Management

Discover how to implement ISQM 1 with a risk-based approach. Learn how audit firms can embed quality management into daily operations and governance.

CERRIX User Conference 2025

Op 12 maart 2025 kwamen marktleiders, verzekeringsexperts en CERRIX-klanten samen voor de CERRIX User Conference 2025, een dag van kennisuitwisseling, inzichtelijke discussies en samenwerking over de toekomst van risicobeheer, compliance en AI-gestuurde GRC-oplossingen.

Van spreadsheets tot GRC-software: waarom pensioenfondsen een moderne benadering van risicobeheer nodig hebben

CERRIX en BR1GHT versterken langdurige samenwerking om oplossingen voor bestuur, risico, compliance en audit te verbeteren

DORA implementeren: van compliance tot veerkracht op lange termijn

Gebruik van GRC-software: uitdagingen overwinnen en succes behalen op het gebied van compliance