What is happening across the ecosystem.
Company news, product releases, and practitioner commentary on regulatory changes and market developments across risk, governance, and compliance - serving APAC, GCC, and global markets.
Featured this month.
Effective Risk Management launches new website and connected product ecosystem
Three platforms - RiskBridge, MaturityOne, and Wahid AI - now form a connected suite of enterprise risk and governance products alongside our consulting practice. Serving regulated industries across APAC, GCC, and the United Kingdom.
Read moreResilience domain now live with CPS 230 alignment
Wahid AI launches with three live governance modules for APAC and GCC
GRC Product Selector expanded to 180+ vendors globally
Across the ecosystem.
Development team lead joins from Pakistan
New development team lead appointed in Pakistan to accelerate product engineering across RiskBridge, MaturityOne, and Wahid AI. Strengthens cross-regional delivery capability.
Partner Canda Consulting relocates to Vietnam
Canda Consulting has completed its move to Vietnam, establishing a permanent presence in Ho Chi Minh City. Deepens AI governance delivery and Knowledge for Good program across South-East Asia.
Dedicated research lead hired for compliance engine
New research lead appointed to drive the compliance and regulatory mapping engine across MaturityOne and Wahid AI. Focused on APAC, GCC, and EU regulatory frameworks.
Effective Risk Management launches new website and product ecosystem
Three platforms now form a connected suite alongside consulting. Serving regulated industries across APAC, GCC, and the United Kingdom.
Resilience domain now live with CPS 230 alignment
Seven-pillar resilience model covering 106 questions across business, technology, supplier, cyber, and AI system resilience.
Wahid AI launches with three live governance modules for APAC and GCC markets
AI Use-Case Governance, AI Maturity Assessment, and Training and Awareness now live. Five additional modules on the roadmap.
GRC Product Selector expanded to 180+ vendors globally
The Selection module database now covers 180+ GRC products with refreshed Gartner MQ positioning and weighted scoring.
Value Optimisation module completes the six-module lifecycle
Seven-source ROI assessment now live. Measures licence cost, operational efficiency, risk reduction, compliance, user adoption, data quality, and stakeholder satisfaction.
NIST CSF 2.0 add-on now live for Cyber Security domain
Cross-mapped to the updated NIST Cybersecurity Framework 2.0, including the new Govern function. Available alongside ISO 27001 and Essential Eight.
One Lite SME product expanded to 13 integrated domains
Complete standalone assessment covering 330 core questions across 112 sub-domains. Designed to be completed in half a day.
Knowledge for Good program expands to Vietnam with Canda Consulting
Partnership to build the AI governance knowledge base in Vietnam - translated frameworks, practitioner workshops, and ISO 42001 readiness materials.
Wahid AI selected for GCC AI governance advisory program
Appointed to support AI governance advisory engagements across UAE and Saudi Arabia, focusing on ISO 42001 alignment and regulatory readiness.
Third Party Risk domain reaches 125 questions across 20 domains
Full procure-to-pay lifecycle coverage - due diligence, contract, onboarding, oversight, performance, incident, change, and offboarding.
Improvement module launches with industry benchmarking
Quick-assessment benchmarking for GRC platform maturity. 30-minute assessment with industry-comparable scoring.
$4,300 raised for GRC professionals in Sindh, Pakistan
Knowledge for Good fund reaches $4,300 - directed toward certification exam fees, study materials, and mentoring for early-career professionals in Sindh.
AI Governance domain live with ISO 42001 and EU AI Act mapping
122 core questions across 10 AI governance domains. Built by an ISO 42001 Lead Auditor. Two regulatory add-ons live from day one.
Enterprise Risk domain enhanced with Comprehensive tier
Two-tier assessment model - Standard (8 domains, 40+ questions) and Comprehensive (15+ domains, hundreds of maturity markers) - now available.
RiskBridge platform launches with four initial modules
Selection, Implementation, Oversight, and Program Management modules go live. Built to cover the full GRC tool lifecycle from day one.
The people behind the products and practice.
Development team lead joins from Pakistan
New development team lead appointed in Pakistan to accelerate product engineering across RiskBridge, MaturityOne, and Wahid AI.
Partner Canda Consulting relocates to Vietnam
Canda Consulting has completed its move to Vietnam, establishing a permanent presence in Ho Chi Minh City.
Dedicated research lead hired for compliance engine
New research lead appointed to drive the compliance and regulatory mapping engine across MaturityOne and Wahid AI.
Knowledge for Good community session reaches 40 participants
Career Pathways in GRC - from Analyst to CRO. Our largest community session to date.
Canda Consulting partnership formalised for Vietnam AI governance
Official partnership to deliver translated AI governance frameworks and practitioner workshops across Ho Chi Minh City and Hanoi.
CRISC and CISA study group cohort graduates in Sindh
First cohort of Knowledge for Good study group participants complete their ISACA certification preparation.
Effective RM team grows with two new partner appointments
Expanded the partner network with specialists in third-party risk management and cyber security strategy.
Team end-of-year reflection and 2026 planning
40+ enterprise engagements delivered. Three products in market. Knowledge for Good program reaching practitioners in three countries.
ISO 42001 Lead Auditor certification achieved
Founder completes ISO/IEC 42001:2023 Lead Auditor certification - one of the first in Australia.
Start with a conversation.
Whether you are evaluating GRC platforms, assessing your risk maturity, navigating AI governance, or looking for a practitioner who has done the work - we respond within one business day. No SDR sequences. No chatbots. A real conversation with a practitioner.