"Applying information technology (IT) to governance, risk, compliance and ethics management processes can be a challenge -- especially since these processes are really just little bits and pieces of all other enterprise processes."
- Scott Mitchell, Chairman and CEO, Open Compliance & Ethics Group
The OCEG Technology Council was formed to address the strategic, operational and technical issues that professionals face when applying IT to governance, risk, compliance (GRC) and ethics management. Technology Council members meet monthly in specialized working groups focused on GRC technology standards, implementation tools and taxonomy. The entire council convenes quarterly to review the progress of the working groups, discuss key issues facing GRC and IT professionals, and to identify new technology program opportunities for OCEG. The OCEG Technology Council engages some of the world's leading GRC software, services and content providers and user organizations in the development of strategic and technical resources that help IT and Business professionals improve the practice of GRC within their organizations.
OCEG Technology Council Programs
OCEG's hierarchical glossary and reference guide of business and technology terms and primary concepts across the corporate governance, risk management, compliance and ethics management realm.
OCEG's comprehensive enterprise software, information and services architecture designed to help all practitioners map the core functions and technologies that comprise the governance, risk and compliance management infrastructure for any organization.
OCEG's complete process management and implementation maturity model designed to help practitioners understand how to fully integrate governance, risk and compliance criteria into enterprise software, information and services planning, budgeting, selection, support and delivery.
OCEG's core technology standards program, in cooperation with the Open Applications Group (OAGi), focuses on modeling, mapping and testing the entities in a GRC information management backbone that are exchanged between IT systems (including incidents, objectives, events, risks, controls, tests, and messages) in an open XML/UML schema.