GRC 20/20’s 2020 Research Year in Review
2020 was certainly a year for the history books. While it has been a roller coaster that moves on into 2021 now, it certainly had a lot of impact on governance, risk management, and compliance (GRC) strategies, processes, and technology. The keywords for 2021 are integrity and resiliency. Organizations are seeking to increase organizational integrity that they live up to their ethics, values, commitments, and obligations in the midst of uncertainty. They are also looking to increase business and operational resiliency. I see both the terms business and operational resiliency used a lot, they are different but related. Business resiliency is the resiliency of the organization’s strategy, finance/treasury position, and operations. Operational Resiliency is that last piece in business resiliency: operations. Operational resiliency is looking at the risk and resiliency of the organization’s processes, functions, systems, and third party relationships.
Below is a summary of the research blogs and papers that GRC 20/20 has published throughout 2020 organized by topic area. However, it is critical that I refer to three research articles from the last few months of 2019 as they have been referred back to over and over again as foresight from GRC 20/20 into what the year 2020 brought us. These are:
- Navigating Chaos
- GRC 4.0 – Agile GRC in a Dynamic & Disrupted Organization
- Tale of Two Futures: Blade Runner or Star Trek?
Now let’s look at GRC 20/20’s 2020 Research Year in Review. As always, you can ask GRC 20/20 Research questions in the context of governance, risk management, and compliance strategies and processes, as well as solutions available in the market we cover in our objective market research through the inquiry process.
Enterprise GRC and the Broad GRC Market
This starts with GRC 20/20’s flagship annual research briefing that defines, segments, sizes, and forecasts the broad GRC market and its various individual segments:
Other Enterprise GRC research publications that GRC 20/20 led in 2020 are:
- OCEG GRC Maturity Survey 2020 Report
- GRC Pundit Podcast: ING GRC Orchestrate Project
- Engaging GRC to the Front-Office, and Not Just Back-Office Functions
- Role of Business Proces Modeling in GRC Requirements
- Managing Integrity Through GRC Engagement of Employees
- Delivering 360° Contextual Awareness of Your GRC Program
- Keep Calm & GRC On!
- Forrester GRC Wave = Tsunami of Confusion
- How Mature is Governance, Risk Management & Compliance (GRC) in Your Organization?
Corporate Compliance & Ethics Management
- Chief Ethics & Compliance Officer (CECO) SWOT Analysis
- Disclosure Management: Comparing Compliance Solutions
- Delivering on Agile Compliance in Dynamic Business
- Efficiency & Agility in Accountability Compliance – SMCR, BEAR, SEAR, MIC, GIAC
- How to Tie a Compliance & Ethics Bow Tie
- Agile and Integrated Compliance: Managing Compliance in Dynamic Business
- Next Generation Corporate Compliance & Ethics Architecture
- Driving Efficiency into Compliance & Ethics Processes: Time Saved = Money Saved
- Compliance & Ethics is Rapidly Evolving
- Centralizing Compliance and Ethics Communications in a Time of Crisis
- 7 Habits of a Highly Effective Privacy Compliance Program
- UK SMCR: Trekking Up the Mountain
Enterprise & Operational Risk Management
- Being Unprepared for the Crisis Does Not Make it a Black Swan
- Rethinking Risk Management RFP Requirements
- The Pandemic & the Dominos of Risk Interconnectedness
- Effective Risk Management in Context of the Pandemic
- GRC Supper Club: Operational Resiliency and the Interconnectedness of Risk
- Managing Risk Creatively & Structurally
- GRC Pundit Podcast: Toni Villanen of Majid Al Futtaim
- Managing Risk in Dynamic & Distributed Business
- avedos risk2value
- Protecht.ERM
Policy Management
- Policy Management Illustrated ebook
- Next-Generation Policy Management: Collaborative Accountability
- Why Policies, and Policy Management, Matters
- Policy Engagement In A COVID & Post-COVID World
- Policy Management and Remote Work: Adapting to the New Normal
- Communicating Policies in a Time of Crisis
Third-Party (e.g, Vendor/Supplier) Management
- Value of a Third Party Assessment
- A Business Case for Integrated Third-Party GRC Across the Extended Enterprise
- Ensuring Integrity in the Extended Enterprise
- At the Cross-roads: A Tale of Four Third Party GRC/Risk Management Roads to Travel
- Why Third-Party 360° Situational Risk Awareness is Needed Now More Than Ever
- Third Party GRC vs Third Party Risk Management
Corporate Legal Management
- Legal GRC Management by Design
- Operationalizing GRC in Context of Legal & Privacy: the Last Mile of GRC
Privacy Management
- Privacy, Pandemics, and Business Change…OH MY!!!
- Operationalizing GRC in Context of Legal & Privacy: the Last Mile of GRC