Upcoming Events . . .

Latest Pontifications & Thoughts . . .

  • 3 GRC Priorities for Your Organization in 2022

    3 GRC Priorities for Your Organization in 2022

    The past two years have been a trial for organizations as they have been required to respond to the complications, risks, and intricacies of the pandemic and its impact on business strategy, operations, and objectives. The focus has been on resiliency with the ability to recover quickly to changing risk conditions to keep the organization moving forward.…

  • Foundation of a Policy Management Strategy

    Foundation of a Policy Management Strategy

    Already today I have had three inquiries from organizations discussing their policy management strategy and the appropriate solutions to address their enterprise policy management and training needs for a holistic approach to policy management. Here are some thoughts on how to build a policy management strategy from the recent GRC 20/20 research report, Strategy Perspective:…

  • Delivering Agile Compliance

    Delivering Agile Compliance

    In business, change is inevitable. The compliance landscape is also constantly evolving. Agile compliance ensures businesses move with these changes. Business today is dynamic. It is changing minute-by-minute and second-by-second. Employees, processes, technology, transactions, interactions, even business relationships are in a continuous state of movement. At the same time, the regulatory and risk environment is…

  • 360° Visibility into Policies and Policy Management

    360° Visibility into Policies and Policy Management

    Dynamic, Disrupted & Distributed Business Requires Policies Gone are the years of simplicity in business operations. Exponential growth and change in risks, regulations, globalization, distributed operations, competitive velocity, employees, partners, technology, and business data encumbers organizations of all sizes. Keeping business strategy, performance, uncertainty, complexity, and change in sync is a significant challenge for boards…

  • Have You Done your Policy Enforcement Push-ups?

    Have You Done your Policy Enforcement Push-ups?

    I love teaching my “By Design” Workshops! This past Monday it was Policy Management by Design, my favorite of all of them, in New York City. It is great to be back live teaching these interactive workshops, and it was a great day in New York with engaged attendees from a range of organizations. The…

  • Hybrid Working: What About the Risk?

    Hybrid Working: What About the Risk?

    I have been a remote and hybrid worker for twenty-five years. It is has been and remains my professional life. I work out of my home office (though I do have a rental office space I can use for when I need seclusion). It takes a lot of foresight to manage the risks as I…

  • Risk Management Lessons from Denmark

    October was a great month! Business travel is back and I had a backlog of in-person engagements across London, Paris, Copenhagen, Zurich, and New York. It is good to be back on the road and meet people around the world in the context of my research into governance, risk management, and compliance (GRC) challenges organizations…

  • ESG – It’s Time to Up Your Game

    ESG – It’s Time to Up Your Game

    Why Every Organization Should be Focusing on ESG I recently wrote an article for Aravo’s new publication, Risk & Resilience. Their inaugural issue focused around the important topic of ESG, and is jampacked with great thought leadership content from a variety of experts and perspectives. I invite you to read the article I included below, but…

  • Are You Headed to a Risk Management Clusterf***?

    Are You Headed to a Risk Management Clusterf***?

    Yes, you read that correctly. Anyone that knows me knows that I am not inclined to use profanity casually. The reality is that this term, clusterf***, is a technical term. The term has its roots stemming from the Vietnam War, perhaps earlier. It defines a situation where there is a lot of top-down strategy (high-level…

  • Policy Management Maturity: Journey to an Agile Policy Management Program

    Policy Management Maturity: Journey to an Agile Policy Management Program

    Successful policy management requires the organization to provide an integrated strategy, process, information, and technology architecture to consistently govern policies across the organization. The goal is to give comprehensive, straightforward insight into policy management to identify, analyze, manage, and monitor policies in the context of operations, processes, transactions, and roles. It requires the ability to…

  • Putting $$$ to It: Can You Quantify Your Risk?

    Putting $$$ to It: Can You Quantify Your Risk?

    As Sir Arthur Conan Doyle stated . . . “It is a capital mistake to theorize before one has data. Insensibly one begins to twist facts to suit theories, instead of theories to suit facts.” Data is critical to risk management, and the more objective and quantitative the data is, the more value risk provides…

  • Doctor Strange: Chief Risk Officer in the Multiverse of Uncertainty

    Doctor Strange: Chief Risk Officer in the Multiverse of Uncertainty

    Last week I looked at James Bond 007 and Risk Situational Awareness where we explored how organizations need to be like James Bond and have full situational awareness of risk and uncertainty to objectives. This week we keep on the fictional hero theme with a look at Dr. Strange who is the representative of the…