Governance, risk management, and compliance (GRC) is something every organization does: it is part of business. Whether the organization calls it GRC, ERM, EHS, or something else…every organization has some… Continue reading GRC Take 2: Key Factors in Choosing a New GRC Vendor

Effectively managing policies is easier said than done. Ad hoc or passive approaches mean that policies are outdated, scattered across the organization, and not consistent– resulting in confusion for recipients… Continue reading Are Your Policies a Mess? A Maze of Confusion?

I am sitting in a pub in London having a pint after an intense week of interactions with organizations. My mind is laser focused on the burning issue of the day: operational… Continue reading Operational Resiliency: Connected Management of Operational Risk

I love adventures! Whether in a city or out in nature, it is exciting to go out and do things. Simple adventures do not require a lot of planning, but… Continue reading Manage Your Privacy Journey: GDPR, CCPA & Beyond

I love sailing. It has fascinated me since I was in high school, but only recently have I taken up learning to sail. While I have not sailed across an… Continue reading GDPR: Moving Forward Out of the Doldrums

Organizations take risks all the time but fail to monitor and manage risk effectively. A cavalier approach to risk-taking is a result of a poorly defined risk culture. It results… Continue reading Monitoring and Managing Risk Effectively

Governance, risk management & compliance (GRC) is something an organization does and not something an organization buys. GRC, done properly, is what is achieved throughout the business and its operations. By… Continue reading Understanding & Improving Governance, Risk Management & Compliance

For those of you on this list that know me on a personal level, I am a huge Tolkien fan. In fact, I am just a Master’s thesis away from… Continue reading The One Regulation to Rule Them All: UK SMR/CR & Cascading Regulations