The RTJ Bridge is the new premium version of The RiskTech Journal, delivering fast-moving, strategically relevant insights for risk leaders navigating today’s digital business landscape.
Designed as the link between editorial commentary and in-depth research, The RTJ Bridge offers exclusive access to:
High-frequency insight notes on market shifts, regulatory signals, and emerging technologies
Executive briefings and editorial series including “The Risk Ignored”
Strategic previews of IRM Navigator™ research, including upcoming Risk Landscape Reports
Whether you're monitoring vendor moves, tracking governance shifts, or preparing for regulatory disruption, The RTJ Bridge equips you with actionable foresight.
The RTJ Bridge - The Premium Version of The RiskTech Journal
Subscribe to get access now
The RTJ Bridge Subscription is a premier resource for executives and professionals focused on the intersection of risk management and technology. It provides subscribers with access to a curated collection of articles and expert insights designed to enhance risk management strategies through technological innovation. With its online format, The RTJ Bridge offers flexible access to critical information, helping leaders make informed decisions and stay competitive.
Diligent’s Cyber Risk Report Brings Real-Time Threat Intelligence to the Boardroom
As the RSA Conference 2025 concludes, one of the final—but potentially far-reaching—announcements came from Diligent, the board-focused GRC software provider. On April 29, the company revealed its new Cyber Risk Report, delivered via the Diligent One platform and developed in partnership with Cloudflare and Qualys.
The announcement addresses a longstanding IRM challenge: effectively communicating cybersecurity risk to non-technical decision-makers. Diligent’s approach combines real-time threat intelligence (Cloudflare), risk surface scoring (Qualys), and executive-facing reporting tools—all within a single, continuously updating report format.
Rather than expanding detection capabilities or technical automation, this product aims to improve the interpretation and presentation of cyber risk at the board level.
ServiceNow’s Risk Expansion: What the CIMCON Partnership Reveals About the Future of IRM
On the final day of the RSA Conference 2025, ServiceNow unveiled a strategic partnership with CIMCON Software. This announcement may appear modest at first glance, but it has profound implications for the future of integrated risk management.
Integrating CIMCON’s technology into ServiceNow’s IRM platform extends its reach into two complex and under-managed domains: End User Computing (EUC) and AI model risk. Both represent decentralized, often undocumented elements of the modern digital enterprise. Historically, these domains have eluded traditional GRC platforms—falling outside structured risk workflows and beyond the reach of legacy tooling.
With this move, ServiceNow is not simply expanding features. It is expanding the definition of what an IRM platform must be.
AuditBoard’s Connected Risk Strategy: Strategic Evolution or History Repeating Itself?
On Day Two of RSA Conference 2025, AuditBoard presented a series of announcements intended to reposition the company well beyond its audit origins. Among them, a brand refresh with a new design language, the debut of an AI governance module, and the launch of a regulatory compliance platform called RegComply. These moves suggest an ambition to reframe AuditBoard as a broader platform for managing risk—beyond audit and into what it describes as “connected risk.”
But as competitors at RSA unveil agent-powered and AI-native capabilities, AuditBoard’s expansion strategy raises an important question:
Is this a strategic evolution—or is history repeating itself?
Safe Security’s Autonomous TPRM Heralds the Start of the Autonomous IRM Era
At the RSA Conference 2025, Safe Security unveiled its new Autonomous TPRM platform, positioning it as the industry’s first fully autonomous third-party risk management solution powered by specialized AI agents.
The solution automates third-party risk assessments, continuous monitoring, and vendor lifecycle management with minimal human intervention. It promises greater scalability, speed, and consistency in managing third-party ecosystems, which have historically been plagued by fragmentation, high administrative overhead, and compliance exposure.
While Safe Security’s announcement is significant, it also signals something larger:
The risk management industry is beginning to operationalize the first phase of Autonomous Integrated Risk Management (Autonomous IRM).