Compliance Ethics and Cybersecurity

Derek McGibney
1 day ago
3 min read

Updated: 8 hours ago

Please note that we provide links to external sites which were correct at the time of publication, but they may be updated. Cognitive GRC provides advisory services to regulated firms in Hong Kong on international requirements and works with various service partners to deliver these services. Firms should obtain specific advice relating to matters that we highlight here. This is neither legal, accounting or investment advice.

Cognitive GRC has launched a new digital training offering on the iSpring Learn LMS platform (iSpring is a registered trademark of iSpring Solutions, Inc.), giving clients smoother access to courses, stronger tracking and reporting, and tighter integration with how training is designed and delivered.

New LMS-powered training

The new platform allows training to be delivered directly to client teams, with completion, progress, and reporting data captured in one place for compliance and oversight purposes. Because the LMS is fully integrated with modern course-authoring tools, content can be updated quickly so programmes stay practical, relevant, and aligned to learning objectives.

Cost Structure for smaller GRC teams

Cognitive GRC is partnering with iSpring to shape configurations that work for small and mid-sized firms that need straightforward training assignment, tracking, and knowledge development for compact teams. The same environment can also support basic HR-related needs such as managing mandatory training, certifications, and simple records, without the overhead of a large enterprise system. A Powerful Corporate LMS for Business Growth — iSpring LMS

Ethos: practical, tested solutions

The LMS was selected after testing multiple platforms that offered similar promises but delivered different results in practice. The chosen solution aims to give smaller firms a single, efficient system for training delivery and record keeping, supporting real time savings and measurable outcomes rather than just ticking boxes.

New AI and resilience primer

Building on recent work with clients on operational resilience and AI, Cognitive GRC has also launched a 30‑minute introductory course that explains the basics of AI use, key opportunities, and emerging risk themes for both senior management and day‑to‑day users. The session is designed to help firms frame AI adoption within governance, risk, and compliance expectations rather than viewing it purely as a technology project.

Accessing the training

A wider client portal for direct self-service access will follow, but early adopters can be set up on the platform very quickly on request. Firms with immediate training or record-keeping needs are encouraged to reach out so that appropriate access and pilot programmes can be arranged.

Core Curriculum

We cover Cyber resilience and AI Usage in our new training. We summarise our work on Digital Resilience over the last 6 months looking at this area with key industry participants, provide users with basic explanation and explore the practical suggestions highlighted by industry, as well as suggesting a few of our own. Did we use AI to produce the content. Well, of course we did, but we took a cautious and considered approach which also helped us to inform our own policies on AI usage. This allows us to provide our clients with appropriate recommendations on how they can approach theirs and gives us practical insight.

Our approach to training is to design it in a way that forms part of the mitigation and control strategy to ensure that it not a static monotonous droning information drop but engages with the recipients to deliver impactful understanding of key issues as they develop. As the training is designed and curated by consultants dealing with the issues that are covered on a day-to-day basis, it is designed to be up to date and informative.

AI LLM Basics

AI Accelerating Inertia

These two videos form part of the overall thought leadership/training content to help inform a broad audience of the general content and risk considerations relating to use of AI. As well as educating users on the risk matters, it is designed to provide an appreciation of the controls that need to be adopted to ensure compliance with regulatory and ethical standards on the appropriate use of technology in financial services.

Compliance Officers and Training Firms may consider the content appropriate for providing staff with an appreciation of the risks of using new technology as part of continuous professional training programmes that they offer. Employees of regulated firms should confirm with their compliance/HR contact weather training is deemed appropriate for their needs. You can read more details about these expectations from earlier blogs referenced below.

Service Brochures