Articles
Tag: it grc
-
How Risk Management Can Build Credibility With Management
ERM wants a seat at the management table. What do risk practitioners need to do to make this happen? And should that really be their goal?
Continue reading...
-
Revitalizing Risk Management Through a Changed Reporting Structure
Would a change in reporting structure revitalize and give new energy to a risk management function and practice?
Continue reading...
-
Assessing and Addressing Technology Risk
Any technology risk assessment should be made in terms of the potential effect on the business, not any effect on IT assets or goals.
Continue reading...
-
Is It Time We Retire the GRC Acronym?
Instead of using GRC, should we instead focus on what people are responsible for rather than tagging them with an expression that signifies nothing?
Continue reading...
-
Is Agile Auditing the Latest Fad or a Really Great Practice?
If your organization is practicing agile internal auditing, is it practicing big A Agile or little a agile? Because there's a big difference between the two.
Continue reading...
-
The GDPR Consequences We Haven't Talked About
The pandemic has inevitably caused both individuals and companies to alter or check their normal security and data protection practices.
Continue reading...
-
Should We Abandon Risk Assessment, Risk Management and Risk Appetite?
More people are recognizing that managing or mitigating a list of risks is not effective, nor of much value beyond compliance.
Continue reading...
-
Another Look at Risk Appetite
If you are developing a risk appetite statement, don’t do it to comply with regulations — do it so it means something.
Continue reading...
-
How Should We Be Thinking About Risk, Purpose and Objectives?
Defining a clear corporate purpose and rigorously paying attention to long-term value creation can help executives make difficult choices.
Continue reading...
-
Optimizing Board Decision-Making
The way in which the board and executive management teams have to operate to thrive in today’s environment is changing. Has your board changed as well?
Continue reading...
-
Are You Too Risk Averse?
How many senior executives and directors can name a chief risk officer who has advised them their organization is too risk averse?
Continue reading...
-
How Effective Process Management Can Reduce Business Risk
There is a close link between business processes and risk levels. Learn how to manage the former to reduce the latter.
Continue reading...
-
The Concept of Resilience: A New Buzzword
You should be prepared and resilient for unforeseen adverse events, but you also need to be agile and sufficiently responsive to unforeseen opportunities.
Continue reading...
-
What Is Wrong With a Typical Risk Register?
How can the risk register be improved?
Continue reading...
