SAS Enterprise GRC
SAS Enterprise GRC strengthens governance and trust with systematic management of risk. It detects and helps prevent violations, allowing you to align strategy with risk appetite. The solution builds a reliable view of risk compliance, facilitates collaboration between GRC teams and reduces the cost of risk management through automation. Some Distinctive Features Include: Creates a common and integrated repository of all critical GRC components (e.g., risks, controls, policies, audits, etc.). Facilitates collaboration between various GRC teams, which will be difficult when the GRC components are in multiple systems. Reduces cost of risk management and compliance by reducing duplication of data and processes. Links all critical GRC elements, enabling you to easily visualize and assess the impact of a business decision in one part of the organization over other parts of the organization.
- IT.01 - Audit and Assurance Management
- IT.03 - Brand and Reputation Management
- IT.05 - Compliance Management
- IT.07 - Control Activity, Monitoring, and Assurance
- IT.12 - Finance/Treasury Risk Management
- IT.13 - Fraud and Corruption Detection, Prevention & Mgmt
- IT.16 - Information/IT Risk & Security
- IT.19 - Issue and Investigations Management
- IT.22 - Policy Mgmt, Communication & Training
- IT.24 - Quality Management and Monitoring
- IT.26 - Risk Management
- IT.26 - Regulatory Intelligence and Monitoring
- IT.27 - Strategy, Performance, and Business Intelligence
- A1. Identification
- D1. Detective Actions & Controls
- I1. Info Management
- M1. Context Monitoring
- P1. Proactive Actions & Controls
- R1. Responsive Actions & Controls
- A2. Analysis
- D2. Notification
- M2. Performance Monitoring
- R2. Internal Investigation
- A3. Planning
- D3. Inquiry
- I3. Technology
- P3. Policies
- R4. Crisis Response
- P7. Risk Financing
NFPA, Standard on Disaster/Emergency Management and Business Continuity Programs (2010 Edition) resource Standards and Guidelines OCEG Reviewed
This edition of NFPA 1600, Standard on Disaster/Emergency Management and Business Continuity
Why is GRC important? blog
I have been blogging about what GRC is, advocating the definition developed by the Open Compliance and Ethics Group, OCEG (see this and subsequent posts). But, I haven’t really talked about why the concept of GRC has value.
Business Continuity Maturity Model® (BCMM®) resource OCEG Reviewed
FFIEC, Business Continuity Planning (2008) resource Agency Guidances OCEG Reviewed
NIST, Computer Security Incident Handling Guide (2008) resource Agency Guidances OCEG Reviewed
Auditor Answers: Performing Post Mortems on Problem Events (2008) resource Articles OCEG Reviewed
SBA, Expect the unexpected: Prepare your business for disaster (2007) resource Agency Guidances OCEG Reviewed
Practical Disaster Recovery Planning: A Step-by-Step Guide resource White Papers OCEG Reviewed
Disaster recovery, backup, and restore: Big challenges for small businesses (2008) resource Articles OCEG Reviewed
