INQUIRY:  What are the 3 most critical areas for further GRC automation in 2009 – and why?   RESPONSE: The top of my list is what I am calling “Next Generation Policy & Procedure Management.”  This may not be on everyone’s radar – but it is a significant area to drive efficiency, consistency, as well……

  INQUIRY: What are the 3 biggest misunderstandings about GRC-enabling technology? Why these particular areas are the most misunderstood outside of the IT organization and how can IT help clarify information?      RESPONSE: There are several areas that are highly misunderstood in regards to GRC-enabling technology.  The following represent what I see as the most common……

  INQUIRY: In 2009, what will be the least obvious/highest impact business or market trend resulting from GRC automation?   RESPONSE: Tough question – but I am happy to play the prophet.  I would have to say it is the use of GRC technology to extend GRC processes to business partners.  There are more also……

QUESTION: What are the top three roles and responsibilities of a compliance officer? We are trying to define this job role very clearly before we determine we need one. RESPONSE:The top three roles and responsibilities of a compliance officer vary — it depends on what you are defining as a compliance officer. If you mean……

The New Year of 2009 is at our doorstep and with the global turmoil it is about time many organizations begin thinking of enterprise risk management Today we explore the Ultimate Enterprise Risk Management (ERM) Platform. Many of you expressed deep interest in my Ultimate Compliance Platform earlier in December. This week, I am delivering……

  Christmas (or other holiday tradition you celebrate) is upon us with its associated gift giving.  In the spirit of giving and Christmas cheer, I am delivering the beginning of a series of role-plays looking at what different risk and compliance roles would want in their Christmas stockings. To kick this off- we will initially……

While briefed on the acquisition before the announcement, I took a few days before commenting on my blog.  The reason being two-fold – I came down with a seasonal cold, but more importantly I wanted to reflect on this some more.   In general – the acquisition of Paisley by Thomson Reuters is a good……

Issues impacting corporate governance, risk management, and compliance are abundant. GRC 20/20 has identified 27 issue areas that organizations struggle with in risk and compliance – THOUGH the one that is keeping GRC 20/20 research and advisory the busiest is 3rd party risk and compliance management. What do you mean by 3rd party risk & compliance? Third……

Global markets are in turmoil, investigations into corporate and executive wrong doing, demands for increased oversight and regulation . . . while the economic climate in general is in question there is no doubt that organizations need stronger corporate governance, enterprise risk, and compliance oversight. The challenge for risk and compliance managers is to make……

What are the questions the Board of Directors of any publicly traded company should be asking regarding the status of GRC enabling technology in their organization?   My experience is that the Board of Directors is not really focused on the technology enablement of GRC – for that part they probably know very little about……

The writing is on the wall – we are entering a new era of corporate governance, risk management, and compliance. The shake up on Wall Street is just the current example of a trend towards greater oversight of business in a volatile world. With this comes a renewed focus on integrity, ethics and values. Organizations……

News . . . the roller-coaster of information pouring into us about the tumultuous times we live in can be overwhelming.  The current focus on the economy in the wake of an ongoing shake-up in Wall Street has many living on the edge of their seats – uncertain about the future.   There definitely is a need……