Articles
Tag: norman marks (page 7)
-
A Fascinating Discussion of Governance and Risk Issues
In a report (Risk Management Survivors Offer Cautionary Tales ) by a professor who attended the World Economic Forum in Davos there is some excellent information on a variety of risk and governance issues. What caught my eye was the section under the heading -- “Redesigning the Board.
Continue reading...
-
Are We More Concerned With Addressing Obvious IT Risks Than Having Effective IT Risk Management?
I ask this question after reading Ernst & Young’s 2010 Global Information Security Survey. The survey has some interesting comments on the top IT security risks from new information technology -- including the obvious ones around data leakage, mobile devices, cloud computing and social media.
Continue reading...
-
Norman Marks: Reflections on GRC in 2010
This year has been one of both progress and frustration when it comes to GRC. While there is a lot to cheer about, and hope for 2011, irritants and obstacles continue. • As I have written before, I support the Open Compliance and Ethics Group (www.oceg.org ) and
Continue reading...
-
The Value of Social Media for GRC Professionals
If you think a GRC professional can't benefit from social media, think again. Social Media and the GRC Professional What I want to cover in this piece is how in general individuals involved in managing GRC processes (such as risk officers, compliance professionals, internal auditors, corporate counsel, etc.
Continue reading...
-
Why is GRC an Important Topic?
In May, I wrote about the fact that there is no commonly accepted definition of GRC. While it is understood that the acronym stands for Governance, Risk Management and Compliance, each consultant and vendor -- to the consternation of practitioners -- seems to use a different definition to explain
Continue reading...
-
GRC: Let’s Talk About Governance
Although risk is the often the most discussed element of GRC (Governance, Risk, Compliance), it is important to understand all aspects. Let's start with Governance. In my last article, I talked about “What is GRC ?” and recommended the Open Compliance and Ethics Group’s (OCEG) definition.
Continue reading...
-
What is GRC?
There is a new buzzword in the business world, or rather buzz abbreviation. GRC -- or governance, risk management and compliance -- has invaded the language of consultants (including the major accounting firms), analysts such as Gartner and Forrester Research, and software vendors.
Continue reading...