Guides

FILTER BY:
GRC Technology Solutions Guide v. 2.1 resource Guides  OCEG Reviewed
Thumbnail

The GRC Technology Solutions Guide  identifies and defines categories of  technology  that have a role in supporting the GRC system and specifically the Elements of the GRC Capability Model™. The Guide categorizes these Technology Categories by:

Read more
Helpline & Hotline Handbook (HHH) resource Guides  OCEG Reviewed
Thumbnail

This Helpline/Hotline Handbook (HHH) is designed for chief compliance officers, chief ethics officers, chief information officers, chief legal officers, those responsible for operating the helpline/hotline system and the helpline/hotline program and those responsible for investigating and reviewing allegations of inappropriate behavior. The Handbook will also be helpful to directors, execu

Read more
Australia, Building Better Governance (2008) resource Guides  OCEG Reviewed

Introduction:

Read more
Video: Five Steps to Building the Next Level in Operational Risk Management resource Guides  Member contribution

Hello all, this new video from Mash Risk TV looks at:* Reviewing Business Objectives* Measuring Maturity* Prioritizing Improvements Based on Business Objectives and Capability Gaps* Selecting Proven Tools From:* Driving Continuous Improvement

Read more
OCEG Internal Audit Guide resource Guides  OCEG Reviewed
Thumbnail
The OCEG Internal Audit Guide (OIAG) can be used by:

 

Read more
OCEG Measurement & Metrics Guide resource Guides  OCEG Reviewed
Thumbnail
The Measurement and Metrics Guide (MMG) is designed primarily for chief compliance and chief ethics officers and will also help the directors, executives and other senior managers who charged with governance responsibilities.
Read more
AICPA, Statement on Auditing Standards No. 115, Communicating Internal Control Related Matters Identified in an Audit, Executive Summary (2008) resource Guides  OCEG Reviewed
The Auditing Standards Board has issued Statement on Auditing Standards (SAS) No. 115, Communicating Internal Control Related Matters Identified in an Audit. SAS No. 115 supersedes SAS No. 112 of the same title and was issued to eliminate differences within the AICPA’s Audit and Attest Standards resulting from the issuance of Statement on Standards for Attestation Engagements (SSAE) No. 15, An Examination of an Entity’s Internal Control Over Financial Reporting That Is Integrated With an Audit of Its Financial Statements. SSAE No.
Read more
AICPA, Trust Services Principles, Criteria and Illustrations for Security, Availability, Processing Integrity, Confidentiality, and Privacy (Including WebTrust® and SysTrust®) (2006) resource Guides  OCEG Reviewed
The Trust Services Principles, Criteria, and Illustrations present criteria established by the Assurance Services Executive Committee of the AICPA for use by practitioners when providing attestation services on systems in the subject matters of security, availability, processing integrity, privacy, confidentiality, and certification authorities.
Read more
COSO, Enterprise Risk Management — Integrated Framework: Executive Summary resource Guides  Member contributionOCEG Reviewed
The Framework helps businesses and other entities assess and enhance their internal control systems and enterprise risk management efforts. This publication incorporates the earlier document “Internal Control – Integrated Framework.”
Read more
New York Stock Exchange (NYSE) Listed Company Manual resource Guides  Member contributionOCEG Reviewed

The New York Stock Exchange Listed Company Manual is the comprehensive rulebook for listed companies. The Manual also details original and continued listing requirements of the Exchange and sets forth NYSE rules and policies on such matters as corporate governance, shareholder communications, and shareholder approval.

Read more