OCEG Illustrated Series

GRC Illustrated Series: #13 What Controls Are Needed For The Extended Enterprise? resource GRC Illustrated OCEG Reviewed

As businesses choose to own less and integrate more, they extend and add complexity to their network of relationships with supply chain and outsource partners. As this happens they also need to extend their internal control, compliance and monitoring processes.

Organizations of all sizes must address a wide range of risks and requirements with an internal control and compliance program. An important objective of this program is to make the board and management aware of any concerns, losses, events and issues that surface across the enterprise.

Many organizations are in the process of taking a step back & to look at how they organize and allocate capital to the full range of governance, risk management, compliance and internal control processes (GRC).

GRC Illustrated Series: #16 How Do We Integrate IT to Enable GRC? resource GRC Illustrated OCEG Reviewed

Making GRC part of the DNA of your organization includes establishing a sound backbone of information technology to automate and enable GRC processes

A high-performing GRC system will always deliver value. Always. The value of a business activity or department directly relates to its contribution to business objectives. For that reason, focusing on measuring GRC activities themselves (risk assessment, policy management, training and communication, or control management, for example) isn’t sufficient.

The mergers and acquisitions, expansions, affiliations, and ever-growing network of contractual arrangements that spell success can also lead to an overly complex mishmash of policies and procedures. An organization’s policies must be managed consistently and continuously throughout the enterprise to remain effective; that’s one of the fundamentals of policy management.

In a rearview mirror, corporate scandals that sparked increased attention to the need for better corporate governance, risk management, internal control and compliance (GRC) may appear smaller than they really are. Yet, despite the evident need, many companies are slashing GRC budgets. In the current environment, GRC executives simply must know how to do more with less.

As regulatory demands and cost-reduction pressures increase, executives want to know how compliance risk training and communication can be made more effective and more efficient.

GRC Illustrated Series: #25 How Do I Optimize My Legal Department? resource GRC Illustrated OCEG Reviewed

Submitted by cswitzer on Apr, 25 2012

There are many departments and functions that comprise the governance, risk management and compliance (GRC) capability. The legal department and related functions is one of the most critical components.

It is critical to recognize that fraud risk is not exclusively about the “good guys” catching “bad guys.” Given the right (wrong) circumstances, even the best people can do some of the worst things.

OCEG | Open Compliance and Ethics Group

FILTER BY:

GRC Illustrated Series: #13 What Controls Are Needed For The Extended Enterprise? resource GRC Illustrated OCEG Reviewed

GRC Illustrated Series: #14 How do We Broaden Our Awareness of Incidents and Risks? resource GRC Illustrated OCEG Reviewed

GRC Illustrated Series: #15 How Do We Optimize Our Approach to GRC? resource GRC Illustrated OCEG Reviewed

GRC Illustrated Series: #16 How Do We Integrate IT to Enable GRC? resource GRC Illustrated OCEG Reviewed

GRC Illustrated Series: #18 How Do We Measure the Performance of GRC? resource GRC Illustrated OCEG Reviewed

GRC Illustrated Series: #19 How Does a Federated GRC Approach Apply to Policy Management? resource GRC Illustrated OCEG Reviewed

GRC Illustrated Series: #20 How Can We Use a Lean Approach for Compliance and Control? resource GRC Illustrated OCEG Reviewed

GRC Illustrated Series: #21 How Should We Educate and Communicate About Compliance Risks? resource GRC Illustrated OCEG Reviewed

GRC Illustrated Series: #25 How Do I Optimize My Legal Department? resource GRC Illustrated OCEG Reviewed

GRC Illustrated Series: #17 How Do We Manage the Business Risk of Fraud? resource GRC Illustrated OCEG Reviewed

Related terms

Standards

Tools and Services

Education

Community

About