

Upcoming Events . . .
Latest Pontifications & Thoughts . . .
-
ISO31000 and GRC: complementary?
ISO 31000 standard proposes a structured approach for any risk management program to include the vocabulary, principles, framework and process for the management of risk. GRC typically encompasses activities such… Continue reading ISO31000 and GRC: complementary?
-
GRC 3.0 – A History of GRC
GRC is “a capability to reliably achieve objectives while addressing uncertainty and acting with integrity." The reliable achievement of objectives is the governance piece, addressing uncertainty is about risk management,… Continue reading GRC 3.0 – A History of GRC
-
3rd Party Management in Financial Services
Regulators such as the OCC, FDIC, CFPB, and NCUA are honing in on the financial services industry and, specifically, their oversight of 3rd party relationships – including vendors. Given the changes in the… Continue reading 3rd Party Management in Financial Services
-
GRC 20/20 is Clarity of GRC Vision
This is the busiest I have ever been as a GRC analyst and market researcher. Lot's of RFPs and projects happening, in fact tracking several dozen current RFP and GRC… Continue reading GRC 20/20 is Clarity of GRC Vision
-
Compliance & Ethics in the Year 2020
Compliance and ethics is not the same today as it was a few years ago, and it’s safe to say that it will continue to evolve in 2020. In the… Continue reading Compliance & Ethics in the Year 2020