Information

GRC Solutions Council group

The OCEG GRC Solutions Council develops tools, guidelines, frameworks and related resources designed to help all organizations align their IT resources with GRC capabilities. Membership in the Technology Council is only available to OCEG Enterprise Members. For more information and membership requirements, please contact techchair@oceg.org.

Description: The OCEG GRC Solutions Council, comprised of corporate end-users and GRC software, information management and services providers.

ISM3 Model V2.1 Overview resource Presentation Slides OCEG Reviewed

The July 29, 2008 GRC Roadmap Work Group Overview of ISM3, Delivered by Vicente Aceituno

ISM3 Model V 2.0 resource Guides OCEG Reviewed

The Information Security Management Maturity Model from the ISM3 Consortium

Managing Information Privacy - Are you Ready for Scrutiny? event WebinarOCEGFree Recorded

Tuesday January 30, 2007 3:00pm

Whether the responsibility for information privacy resides with legal counsel, human resources, IT security, finance, accounting or a newly appointed chief privacy officer, all industries are now coming under tighter scrutiny.

Information privacy is critical in a world where Personally Identifiable Information (PII)* can be so easily compromised. To make matters worse, there are many links in the privacy chain (HR, sales, marketing, customer service, IT, finance) and a failure in any of them can cause the whole system to fail. Ironically, your weakest link may not even be within your company.