O3. Accountability | by OCEG the Open Compliance and Ethics Group

OCEG Contributed

An Integrated Approach to Managing Governance, Risk, and Compliance (SAP, 2006)

Federal Sentencing Guidelines: Key Points and Profound Changes (ERC, 2004)

FSGO Series (ERC)

FAQ: Changes to the Federal Rules of Civil Procedure Affect Storage Plans (2007)

Survey: Majority of b-to-b marketers lack crisis plan (2007)

Sample e-Mail Policy (2007)

GRC Journal

Business Continuity Guideline: A Practical Approach for Emergency Preparedness, Crisis Management, and Disaster Recovery (2005)

Governance, Risk and Compliance Strategy Still a Priority (2008)

BusinessStandards.com

A Unified Approach to GRC

From internal control to enterprise risk management (2005)

COSO, Internal Control - Integrated Framework, Guidance on Monitoring Internal Control Systems: Volume II - Guidance (Exposure Draft, 2008)

Policy Statement on Corporate Governance (TIAA-CREF, 5th Ed, 2007)

IT Governance Standard, ISO/IEC 38500:2008 Order Page (2008)

ISO/IEC 27006:2007 Order Page: Information technology -- Security techniques -- Requirements for bodies providing audit and certification of information security management systems (2007)

AS8015-2005 - Australian Standard for Corporate Governance of Information and Communication Technology (ICT)

Strategic GRC Yields Clear Payback (2008)

SEC, Enforcement Manual (2008)

Sustaining Operational Resiliency: A Process Improvement Approach to Security Management (2006)

FFIEC, Business Continuity Planning (2008)

Business Continuity Maturity Model® (BCMM®)

Win As You Go: A Phased Approach to Implementing Enterprise GRC (Axentis, 2007)

Standard of Good Practice for Information Security, The (ISF)

How to Survive (and Win) with Sarbanes-Oxley (2008)

EU, European Commission Prospectus Directive (Rev. 2009)

Asian Corporate Governance Association (ACGA) - Singapore Codes and Rules

Voluntary Non-Financial Disclosure and the Cost of Equity Capital (October 2010)

Member Contributed

Tools for Building Your Business Case

SEC, Code of Ethics

FAQs for COSO's Enterprise Risk Management Integrated Framework

COSO, Enterprise Risk Management Integrated Framework: Executive Summary

DHS, Risk Management Approaches to Protection (October 2005)

COSO, Order page for the full text of the Enterprise Risk Management Integrated Framework (2004)

Enterprise Governance: Getting the Balance Right (2003)

Sarbanes-Oxley Sections 302 & 404: A White Paper Proposing Practical, Cost Effective Compliance Strategies (April 2003)

Corporate Ethics and Sarbanes-Oxley (2003)

Federal Sentencing Guideline Manual, 2006 (Complete Text with Links to Appendices)

DOJ, Thompson Memo Federal Prosecution of Business Organizations

International Organization for Standardization (ISO)

International Organization for Standardization (ISO) Understand the basics

ISO, 14000 Family of International Standards

ISO 14001:2004 - Environmental management systems -- Requirements with guidance for use (Purchase Site)

ISO 9000 essentials (9001:2008)

ISO Management Standards - Specific applications

ISO, Quality management principles

ISO 9001 Auditing Practices Group

ISO 9001 Accreditation Auditing Practices Group

ISO Code of Ethics

ISO Annual Reports

ISO Strategic Plan 2005 2010

Nasdaq Code of Conduct for the Board of Directors

Nasdaq, Summary of Corporate Governance Proposals

Nasdaq, Corporate Governance (2004)

NASDAQ Stock Market, Inc. Corporate Governance Guidelines for the Board of Directors

NASDAQ Legal and Compliance Page

NASDAQ, Corporate Governance Resources

New York Stock Exchange (NYSE) Listed Company Manual

New York Stock Exchange (NYSE), Corporate Governance

Fraud Prevention: An Investment No One Can Afford to Forego (2006)

Corporate Codes of Ethics - BellSouth Office of Ethics and Compliance

Corporate Codes of Ethics - Boeing Ethics Site

Corporate Codes of Ethics - Raytheon Business Ethics and Compliance Home Page

Corporate Codes of Ethics PG&E Ethics Compliance

Basic Concept of Corporate Governance Panasonic (Matsushita)

Center for the Study of Ethics in the Professions (IIT) - Codes of Ethics Online

Center for the Study of Ethics in the Professions (IIT) - Resources for Writing a Code of Ethics

Leadership Through Progressive Enterprise Risk Assessment (2004)

Managing Risk: An Assessment of CEO Preparedness - Executive Summary (PriceWaterhouseCoopers, 2004)

Selection and Use of the ISO 9000:2000 family of standards (ISO 9001:2000.)

Case for Compliance, The: An article from the American Bar Association (ABA, 2003)

Corporate Compliance Programs in the Aftermath of Sarbanes-Oxley (ABA)

Business Ethics and Compliance in the Sarbanes-Oxley Era (2003)

FRB, To the Officer in Charge of Supervision and Appropriate Supervisory and Examination Staff at each Federal Reserve Bank and to each Domestic and Foreign Banking Organization Supervised by the Federal Reserve (2002)

Business Ethics: A Manual for Managing a Responsible Business Enterprise in Emerging Market Economies (ITA)

Advisories: ANSI-ASQ National Accreditation Board (ANAB)

Compliance Programs, Codes of Conduct, Whistleblowers and Hotlines (2004)

Disarming the Value Killers: A Risk Management Study (2005)

Directive on Information Relating to Corporate Governance, SWX Swiss Exchange, Switzerland (2002)

Swiss Code of Best Practice for Corporate Governance (2002)

Internal Controls and Managing Enterprise-Wide Risks (2004)

COSO Internal Control Framework Resources

FDIC, Strategies for Enhancing Corporate Governance, Audit Report No. 04-032 (2004)

Elephant at the Enterprise Risk Management Party, The (2006)

Enterprise risk management: Aligning design principles to corporate goals (An IBM Executive Brief)

DHS, Risk Management Approaches to Protection: Final Report and Recommendations by The National Infrastructure Advisory Council (NIAC) October 11, 2005

Compliance Journey: Balancing Risk and Controls with Performance Improvement (KPMG)

Federal Sentencing Guidelines Manual §8B2.1. Effective Compliance and Ethics Program (2010)

Proposed Amendments to U.S. Sentencing Guidelines Portend Significant Changes to Corporate Compliance Programs (July 2004)

New Federal Sentencing Guidelines for Organizations: Great for Prosecutors, Tough on Organizations, Deadly for the Privilege; The (March 2005)

Seven Elements of an Effective Compliance and Ethics Program, The (2006)

2004 U.S. Sentencing Guidelines Compliance Programs (Memorandum, 2005)

Seven Habits Of Highly Effective Compliance Programs, Executive Summary (July 12, 2005)

International Institute for Public Ethics (IIPE): The Open Corporation: Evaluation of Corporate Self-Regulation of Responsibility

Top Ten Compliance Challenges for the Health Care Industry (2005)

Struggling to incorporate the COSO recommendations into your audit process? Here's one audit shop's winning strategy.

Building a Partnership for Effective Compliance: The Third Government-Industry Roundtable

Sprint Nextel Corporation: Audit Committee Charter (2005)

Helpline/Hotline Operation in France: CNIL Requirements and the Single Authorization Process Explained

OCEG Corporate Governance Maturity Model

OCEG Corporate Compliance and Ethics Maturity Model

Does the Company Get It? 20 Questions To Ask (And Have Answered) Regarding Compliance, Ethics, and Risk Management

20 Questions Directors Should Ask About Internal Audit (2d Edition, 2007)

A Model of Maturity: The OCEG Corporate Governance Maturity Model (2007)

OCEG Critical Conversations Series: CIO at the Center (2007)

Crisis Management 101 (2007)

Code of Ethics for Compliance and Ethics Professionals (SCCE, 2007)

Accommodating Would-be Whistleblowers (2005)

Measurement Program Strategy Template

Title 18 U.S. Code § 1514A - Civil action to protect against retaliation in fraud cases