The business activities known as governance, risk and compliance (GRC) are tightly linked. Governance, risk management and compliance management are separate but closely related activities that take place in any organization. Governance is essential to the management of a corporation. Without it there can be no reliable way to guide the actions of individuals to align them to corporate objectives and requirements. Risk, for its part, comes in many forms, including internal failure, unfavorable external events and catastrophes. Managing risk involves anticipating negative events, understanding their costs, determining whether the potential benefits outweigh risks, and applying controls either to prevent risk events or mitigate their impact. And because all companies exist in some legal and regulatory jurisdiction, compliance with existing laws and regulations is essential.
This benchmark research program identified, explores and quantifies the ways in which finance, line-of-business operations and IT departments in companies each approaches and executes its governance, risk and compliance management efforts. It determined the value to companies of most effective GRC processes, and assessed the maturity of existing GRC efforts, especially in their use of information technology.
For more information on how to benchmark your organization's maturity and competency in people, process, information and technology using our research or how to use the Value Index, please contact email@example.com.
Not sure where to start? Leverage our research to gain education on best practices and make immediate improvement:
• Download the executive summary to learn more about this research.
• Listen to the webinar to gain a better understanding of how it can help you.
• Access our full range of education and fact-based research through Ventana On-Demand.
• Determine how to improve your people, process, information and technology efforts.
• Contact us to learn how to benchmark your organization’s maturity and competency.
Members of the media who are looking for further information should contact firstname.lastname@example.org