Upcoming Events . . .
Latest Pontifications & Thoughts . . .
-
Considerations When Purchasing GRC Solutions
As a market research analyst, I get involved in a lot of inquiries and interactions with organizations looking to purchase GRC solutions. On average, GRC 20/20 handles about five interactions a week – some weeks more and some weeks less. These can range from simple questions via email or phone to detailed help in writing…
-
Expanding Role of Audit Stretches Resources and Capabilities
The role of the audit is taking on greater significance to guide the enterprise beyond traditional attitudes about financial controls; toward assuring that the organization is managing risk appropriately and meeting obligations across a range of high-risk business processes, operations, and regulatory requirements. Today’s audit department must have a full understanding of the risks the…
-
GRC Federalist Papers: A Call to Action
Business is complex. Gone are the years of simplicity in business operations. Exponential growth and change in risk, regulations, globalization, distributed operations, processes, competitive velocity, business relationships, disruptive technology, technology, and business data encumbers organizations of all sizes. Keeping complexity and change in sync is a significant challenge for boards and executives, as well as…
-
Our Perspective
Our Perspective on the GRC Market and GRC Solutions The GRC market is a macro-market that encompasses several smaller market segments. Major analyst firms treat the GRC market as a micro-market they think can be rolled-up and covered in a two-dimensional plot comparing less than 20 solutions. Their market model and sizing is nothing more…
-
Our Differentiators
Our Differentiators GRC 20/20 is collaborative. We like to roll-up our sleeves and get involved in details. We thrive on interaction and engagement. To be successful in understanding and predicting the GRC market requires that we listen and learn and not merely pontificate and make ourselves untouchable. Unlike major market research and analyst firms, we…
-
Business Agility Across the Extended Enterprise
No company is an island. Organizations are a complex and diverse system of processes and business relationships. Risk and compliance challenges do not stop at traditional organizational boundaries. Organizations struggle to identify, manage, and govern extended business relationships. The challenge is: “Can you attest that risk and compliance are managed across extended business relationships?” An…
-
2014 GRC Drivers, Trends & Directions
I trust the New Year is off to a great start and your governance, risk management, and compliance (GRC) initiatives are fruitful. Myself, I have been quiet in communications this last month wrapping up 2013 projects, redoing much of the www.GRC2020.com website, and planning for 2014. It is important to note that every organization does…
-
GRC Spreadsheets, Documents & Email, OH MY!
Why Spreadsheets, Documents & Emails Fail for GRC At times I can sound like a broken record – repeating myself over, and over, and over, and over again, and again, and again. One of my prominent soapboxes over the past decade has been the failure of spreadsheets, documents, and emails to assess, audit, manage, and…
-
3rd Party GRC: Business Agility in a Dynamic and Distributed Environment
GRC 20/20 is providing a specific focus on 3rd Party Governance, Risk Management & Compliance (GRC) in the month of December. This is the fastest growing part of the GRC market as organizations struggle with issues of conflict minerals, anti-bribery & corruption, social accountability, privacy, security, and more . . . No company is an…
-
Examples of GRC Engagement
In my previous article I made the argument that GRC (Governance, Risk Management & Compliance) is as relevant to the front office as it is to the back office. That the front lines of the business use GRC systems and need engaging user experiences. It is not just the front lines though. All levels of…