(O) Organize | by OCEG the Open Compliance and Ethics Group

OCEG Contributed

OCEG One Minute Poll: Is the CECO a Company Official?

OCEG One Minute Poll: What are Your Desired GRC Program Outcomes?

OCEG One Minute Poll: How Many Compliance Teams?

OCEG One Minute Poll: Have a Compliance Committee?

OCEG One Minute Poll: Does Internal Audit Share the Blame?

CARNIVAL GRC ACHIEVEMENT AWARD 2010 PRESENTATION

OCEG One Minute Poll: Compliance Officers - Got Status? June 2010

OCEG One Minute Poll: GRC Charter December 2010

Board Matters Quarterly, July 2007 Issue

An Integrated Approach to Managing Governance, Risk, and Compliance (SAP, 2006)

Model Chief Ethics and Compliance Officer (CECO) Job Description

Federal Sentencing Guidelines: Key Points and Profound Changes (ERC, 2004)

FSGO Series (ERC)

FAQ: Changes to the Federal Rules of Civil Procedure Affect Storage Plans (2007)

Survey: Majority of b-to-b marketers lack crisis plan (2007)

OTS, Corporate Governance and Oversight by the Boards of Director Program (Examination Handbook, January 2009)

Sample e-Mail Policy (2007)

GRC Journal

Business Continuity Guideline: A Practical Approach for Emergency Preparedness, Crisis Management, and Disaster Recovery (2005)

Governance, Risk and Compliance Strategy Still a Priority (2008)

Staying Out of Trouble: The Role of a Global Anti-Corruption Program

Working Knowledge for Business Leaders, Harvard Business School

BusinessStandards.com

A Unified Approach to GRC

From internal control to enterprise risk management (2005)

COSO, Internal Control - Integrated Framework, Guidance on Monitoring Internal Control Systems: Volume II - Guidance (Exposure Draft, 2008)

Board Responsibilities and Creating Value: Demonstrating Leadership and Accountability (ICAEW, 2006)

Policy Statement on Corporate Governance (TIAA-CREF, 5th Ed, 2007)

IT Governance Standard, ISO/IEC 38500:2008 Order Page (2008)

ISO/IEC 27006:2007 Order Page: Information technology -- Security techniques -- Requirements for bodies providing audit and certification of information security management systems (2007)

AS8015-2005 - Australian Standard for Corporate Governance of Information and Communication Technology (ICT)

Strategic GRC Yields Clear Payback (2008)

SEC, Enforcement Manual (2008)

Corporate Governance for Emerging Markets (2008)

Sustaining Operational Resiliency: A Process Improvement Approach to Security Management (2006)

FFIEC, Business Continuity Planning (2008)

Business Continuity Maturity Model® (BCMM®)

OCEG Critical Conversations: CRO at the Center

OCEG Critical Conversations: CFO at the Center

OCEG Critical Conversations: CIO at the Center

Win As You Go: A Phased Approach to Implementing Enterprise GRC (Axentis, 2007)

OCEG for Technology

Glossary of GRC Terms from Financial Services Provider Perspective

Standard of Good Practice for Information Security, The (ISF)

How to Survive (and Win) with Sarbanes-Oxley (2008)

Final Guidance on Sound Incentive Compensation Policies (June 25, 2010)

USSC, Amendments to the Sentencing Guidelines - Reader Friendly Version of Amendments (Aprill 28, 2011)

EU, European Commission Prospectus Directive (Rev. 2009)

Corporate Governance and Executive Compensation Provisions of the Dodd-Frank Act (July 2010)

Consultation Paper on Corporate Governance Regulations and Guidelines, Monetary Authority of Singapore, March 2010

Asian Corporate Governance Association (ACGA) - Singapore Codes and Rules

USSC, 2010 Federal Sentencing Guidelines Manual

Future of Finance: Driving Business Value Through Performance of the Finance Function (Ernst & Young, 2010)

Voluntary Non-Financial Disclosure and the Cost of Equity Capital (October 2010)

The Maturity of GRC in the Public Sector: Where Are We Today? Where Are We Going? (2010)

The Business Case for Corporate Social Responsibility (June 2011)

Member Contributed

Tools for Building Your Business Case

SEC, Code of Ethics

FAQs for COSO's Enterprise Risk Management Integrated Framework

COSO, Enterprise Risk Management Integrated Framework: Executive Summary

DHS, Risk Management Approaches to Protection (October 2005)

COSO, Order page for the full text of the Enterprise Risk Management Integrated Framework (2004)

Enterprise Governance: Getting the Balance Right (2003)

Sarbanes-Oxley Sections 302 & 404: A White Paper Proposing Practical, Cost Effective Compliance Strategies (April 2003)

Corporate Ethics and Sarbanes-Oxley (2003)

Federal Sentencing Guideline Manual, 2006 (Complete Text with Links to Appendices)

DOJ, Thompson Memo Federal Prosecution of Business Organizations

International Organization for Standardization (ISO)

International Organization for Standardization (ISO) Understand the basics

ISO, 14000 Family of International Standards

ISO 14001:2004 - Environmental management systems -- Requirements with guidance for use (Purchase Site)

ISO 9000 essentials (9001:2008)

ISO Management Standards - Specific applications

ISO, Quality management principles

ISO 9001 Auditing Practices Group

ISO 9001 Accreditation Auditing Practices Group

ISO Code of Ethics

ISO Annual Reports

ISO Strategic Plan 2005 2010

Nasdaq Code of Conduct for the Board of Directors

Nasdaq, Summary of Corporate Governance Proposals

Nasdaq, Corporate Governance (2004)

NASDAQ Stock Market, Inc. Corporate Governance Guidelines for the Board of Directors

NASDAQ Legal and Compliance Page

NASDAQ, Corporate Governance Resources

New York Stock Exchange (NYSE) Listed Company Manual

New York Stock Exchange (NYSE), Corporate Governance

Fraud Prevention: An Investment No One Can Afford to Forego (2006)

Corporate Codes of Ethics - BellSouth Office of Ethics and Compliance

Corporate Codes of Ethics - Boeing Ethics Site

Corporate Codes of Ethics - Raytheon Business Ethics and Compliance Home Page

Corporate Codes of Ethics PG&E Ethics Compliance

Basic Concept of Corporate Governance Panasonic (Matsushita)

Center for the Study of Ethics in the Professions (IIT) - Codes of Ethics Online

Center for the Study of Ethics in the Professions (IIT) - Resources for Writing a Code of Ethics

Leadership Through Progressive Enterprise Risk Assessment (2004)

Managing Risk: An Assessment of CEO Preparedness - Executive Summary (PriceWaterhouseCoopers, 2004)

Selection and Use of the ISO 9000:2000 family of standards (ISO 9001:2000.)

Case for Compliance, The: An article from the American Bar Association (ABA, 2003)

Corporate Compliance Programs in the Aftermath of Sarbanes-Oxley (ABA)

Business Ethics and Compliance in the Sarbanes-Oxley Era (2003)

FRB, To the Officer in Charge of Supervision and Appropriate Supervisory and Examination Staff at each Federal Reserve Bank and to each Domestic and Foreign Banking Organization Supervised by the Federal Reserve (2002)

Business Ethics: A Manual for Managing a Responsible Business Enterprise in Emerging Market Economies (ITA)

Advisories: ANSI-ASQ National Accreditation Board (ANAB)

Compliance Programs, Codes of Conduct, Whistleblowers and Hotlines (2004)

Disarming the Value Killers: A Risk Management Study (2005)

Government in Financial Services: Options and Dilemmas (Ernst & Young, 2009)

Directive on Information Relating to Corporate Governance, SWX Swiss Exchange, Switzerland (2002)

Swiss Code of Best Practice for Corporate Governance (2002)

Internal Controls and Managing Enterprise-Wide Risks (2004)

COSO Internal Control Framework Resources

FDIC, Strategies for Enhancing Corporate Governance, Audit Report No. 04-032 (2004)

Elephant at the Enterprise Risk Management Party, The (2006)

Enterprise risk management: Aligning design principles to corporate goals (An IBM Executive Brief)

DHS, Risk Management Approaches to Protection: Final Report and Recommendations by The National Infrastructure Advisory Council (NIAC) October 11, 2005

Compliance Journey: Balancing Risk and Controls with Performance Improvement (KPMG)

Federal Sentencing Guidelines Manual §8B2.1. Effective Compliance and Ethics Program (2010)

Proposed Amendments to U.S. Sentencing Guidelines Portend Significant Changes to Corporate Compliance Programs (July 2004)

New Federal Sentencing Guidelines for Organizations: Great for Prosecutors, Tough on Organizations, Deadly for the Privilege; The (March 2005)

Seven Elements of an Effective Compliance and Ethics Program, The (2006)

2004 U.S. Sentencing Guidelines Compliance Programs (Memorandum, 2005)

Seven Habits Of Highly Effective Compliance Programs, Executive Summary (July 12, 2005)

International Institute for Public Ethics (IIPE): The Open Corporation: Evaluation of Corporate Self-Regulation of Responsibility

Top Ten Compliance Challenges for the Health Care Industry (2005)

Struggling to incorporate the COSO recommendations into your audit process? Here's one audit shop's winning strategy.

Building a Partnership for Effective Compliance: The Third Government-Industry Roundtable

Sprint Nextel Corporation: Audit Committee Charter (2005)

Helpline/Hotline Operation in France: CNIL Requirements and the Single Authorization Process Explained

OCEG Corporate Governance Maturity Model

OCEG Corporate Compliance and Ethics Maturity Model

Does the Company Get It? 20 Questions To Ask (And Have Answered) Regarding Compliance, Ethics, and Risk Management

20 Questions Directors Should Ask About Internal Audit (2d Edition, 2007)

A Model of Maturity: The OCEG Corporate Governance Maturity Model (2007)

OCEG Critical Conversations Series: CIO at the Center (2007)

Crisis Management 101 (2007)

Code of Ethics for Compliance and Ethics Professionals (SCCE, 2007)

Accommodating Would-be Whistleblowers (2005)

Measurement Program Strategy Template

Title 18 U.S. Code § 1514A - Civil action to protect against retaliation in fraud cases

Regulatory Intelligence by Michael Rasmussen: an Axentis Thought Leadership White Paper