GRC Capability Model 2.1 (Red Book)

An update to v2.1 is now available: OCEG GRC Capability Model v3.

OCEG worked with a committee of hundreds of esteemed experts, including many in-house GRC professionals, external advisors and auditors, and academics, to develop the OCEG Red Book, which contains the GRC Capability Model™ – the central piece of the OCEG Framework.

Disponible en Español

The Model was reviewed by thousands of individuals during the public exposure and comment periods. The Red Book provides a comprehensive guide for implementing a GRC Capability to drive Principled Performance by governing, managing and assuring performance,risk and compliance. The Red Book includes a short narrative overview and presents the Components of the Model in detail.

A spreadsheet version of the Red Book practices is available for download for All Access Pass members.

Companion materials include the GRC Technology Solutions Guide, and the GRC Assessment Tools (Burgundy Book) which are also available for All Access Pass members at no cost.