In John Donne’s famous line, “No man is an island, entire of itself; every man is a piece of the continent, a part of the main,” the seventeenth-century poet’s words are startlingly relevant to modern businesses. Translated into contemporary terms, it suggests, “No organization is an island unto itself; every organization is a piece of…

In an era characterized by ethical, social, and regulatory challenges, many organizations are finding it difficult to navigate the complex maze of compliance. Particularly in an ESG context. The daily news cycle frequently highlights companies falling short of regulatory expectations, painting a picture that corporate ethics is often judged by what firms do when they…

Gone are the years of simplicity in business operations. Organizations today are evolving into more complex, distributed, and autonomous entities. While this evolution ushers in unprecedented growth and opportunities, it has also introduced challenges in ensuring consistent governance, risk management, and compliance (GRC). The digital age, characterized by its interconnectivity and advanced technological infrastructures, has…

One of the top inquiry areas for GRC 20/20’s market research is the role of Corporate Compliance and Ethics Management, managing the range of conduct, ethics, regulations/obligations, policies, and boundaries of the organization. Particularly now in the era of ESG. We regularly get inquiries from organizations looking for solutions for policy management, hotline/whistleblower, case management,…

Complexity & Costs: Key Points of Consideration in Selecting a Solution When it comes to operational resilience and continuity, as well as broader GRC, many solution options are available in the market. Selecting the right solution is critical as many choices lead organizations down the road of complexity and cost, not just in implementation but…

This blog is an excerpt from GRC 20/20’s latest research paper, READ MORE in: A.I. GRC: The Governance, Risk Management & Compliance of A.I. A.I. technology and models are used across industries to analyze, predict, generate, and represent information, decisions, and outcomes that impact operations and business strategy. A range of departments, functions, and roles…

Traditional brick-and-mortar business is outdated: physical buildings and conventional employees no longer define the organization. The modern organization is an interconnected web of relationships, interactions, and transactions that span traditional business boundaries. Layers of relationships go beyond traditional employees, including suppliers, vendors, outsourcers, service providers, contractors, subcontractors, consultants, temporary workers, agents, brokers, dealers, intermediaries, partners,…

I am back in London for a week of exciting engagements. The top of the list is ESG. In my ESG presentation tomorrow at the GRC: The Resilient & Responsible Enterprise event, I am leading with a quote from the sage of wisdom, Ted Lasso, who stated, “Doing the right thing is never the wrong…

I am preparing for another trip next week to the United Kingdom/Europe and reflecting on the differences in GRC – governance, risk management, and compliance – between North America and the UK/Europe. BTW: if you want to meet next week in London and discuss GRC strategy, process, technology, and/or content/intelligence solutions . . . let…

‍GRC 20/20’s Michael Rasmussen will be speaking on the topic of this blog in the webinar: Navigating Complexity & Chaos: Approaching Regulatory Requirements Across Jurisdictions with Control Automation! Complex problems often have a solution that is understandable, simple, and uncomplicated – and usually wrong.  How can we expect that to be different from business operations?…

In the first post, 2023 Governance, Risk Management & Compliance, we reviewed the top five 2023 GRC trends. Then we dove deep into the first trend of the need for GRC agility, and then explored GRC resilience and explored GRC resilience again, moved on to Integrity (ESG), then GRC Accountability . . . and we…