The New Year of 2009 is at our doorstep and with the global turmoil it is about time many organizations begin thinking of enterprise risk management Today we explore the Ultimate Enterprise Risk Management (ERM) Platform. Many of you expressed deep interest in my Ultimate Compliance Platform earlier in December. This week, I am delivering…

  Christmas (or other holiday tradition you celebrate) is upon us with its associated gift giving.  In the spirit of giving and Christmas cheer, I am delivering the beginning of a series of role-plays looking at what different risk and compliance roles would want in their Christmas stockings. To kick this off- we will initially…

While briefed on the acquisition before the announcement, I took a few days before commenting on my blog.  The reason being two-fold – I came down with a seasonal cold, but more importantly I wanted to reflect on this some more.   In general – the acquisition of Paisley by Thomson Reuters is a good…

Issues impacting corporate governance, risk management, and compliance are abundant. GRC 20/20 has identified 27 issue areas that organizations struggle with in risk and compliance – THOUGH the one that is keeping GRC 20/20 research and advisory the busiest is 3rd party risk and compliance management. What do you mean by 3rd party risk & compliance? Third…

Global markets are in turmoil, investigations into corporate and executive wrong doing, demands for increased oversight and regulation . . . while the economic climate in general is in question there is no doubt that organizations need stronger corporate governance, enterprise risk, and compliance oversight. The challenge for risk and compliance managers is to make…

What are the questions the Board of Directors of any publicly traded company should be asking regarding the status of GRC enabling technology in their organization?   My experience is that the Board of Directors is not really focused on the technology enablement of GRC – for that part they probably know very little about…

The writing is on the wall – we are entering a new era of corporate governance, risk management, and compliance. The shake up on Wall Street is just the current example of a trend towards greater oversight of business in a volatile world. With this comes a renewed focus on integrity, ethics and values. Organizations…

News . . . the roller-coaster of information pouring into us about the tumultuous times we live in can be overwhelming.  The current focus on the economy in the wake of an ongoing shake-up in Wall Street has many living on the edge of their seats – uncertain about the future.   There definitely is a need…

Summer is over.  Schedules change, kids are in school, fall is arriving.   As many of you noticed – I took a break from blogging this summer. However, this was not a break from GRC 20/20 work.  I have been working hard at delivering value to clients facing risk and compliance issues as well as…

It is the end of the week – but still a good chance for that final reminder that it is Corporate Compliance and Ethics Week – which happens the last week of May every year. I would encourage you to send out that email to your employees and partners reminding them that compliance is about…

Does the business intelligence (BI) issue fall under the governance, risk and compliance (GRC) domain? Business intelligence (BI) is an essential component to a successful governance, risk and compliance (GRC) strategy: It involves what I refer to as risk and regulatory intelligence. Basically, business has to monitor its internal environment — as well as the…

I recently published my”2008 GRC Drivers, Trends, & Market Directions”research illustrating the dynamic and growing nature of GRC adoption within organizations and the direction and size of the overall GRC market for products and services. Below are the summary highlights from this piece of research. . . Organizations Embrace GRC Principles The Governance, Risk, and…