Upcoming Events . . .

Latest Pontifications & Thoughts . . .

  • Effective Policy Enforcement Involves Technology

    I find that ineffective and unenforced policies are rampant within organizations, and are a thorn in the side of compliance and policy managers.   Mismanagement of policy has grown exponentially… Continue reading Effective Policy Enforcement Involves Technology

  • Policy Communication in a YouTube Generation

    So you wrote a policy—now what? Policies are only effective if you can show that they have been communicated and understood. Having a written policy that nobody knows about is… Continue reading Policy Communication in a YouTube Generation

  • Maintaining Policies and Keeping Them Relevant

    The webinar on policy management addresses a common flaw – the failure to properly maintain policies once issued.  Every policy should go into a periodic review to ensure it remains accurate… Continue reading Maintaining Policies and Keeping Them Relevant

  • Measuring Policy Compliance and Metrics

    This webinar looks at the critical issue of ensuring policy adherence, compliance, and metrics for managing polices.  Attendees will learn the challenges, best practices, and benefits of a measurable and trackable… Continue reading Measuring Policy Compliance and Metrics

  • Increasing Compliance Effectiveness, Efficiency, and Agility with Technology

    Compliance obligations and risk to the business is like the hydra in mythology — organizations combat risk, only to find more risk springing up to threaten the organization. Managing GRC… Continue reading Increasing Compliance Effectiveness, Efficiency, and Agility with Technology

  • Effective Policy Awareness and Training

    This webinar explores the best practices for distributing policies and determining when and how to provide training.  We often think that once a policy has been formally issued the job is… Continue reading Effective Policy Awareness and Training

  • Rethinking GRC: Analyst Rant, Gartner's 2012 EGRC Magic Quadrant

    Yes, the latest Gartner EGRC Magic Quadrant is out and I am left questioning what value it provides.  My first impression is that it is best for the compost pile… Continue reading Rethinking GRC: Analyst Rant, Gartner's 2012 EGRC Magic Quadrant

  • Accountability and Consistency in Policy Development

    In my experience, policy management processes are in disarray when operating autonomously, introducing risk in today’s complex, dynamic, and distributed business environment. The typical organization lacks a structured means of… Continue reading Accountability and Consistency in Policy Development

  • Rethinking GRC

    2012 marks the 10th anniversary since I first modeled a market for technology, content, and professional services and labeled it GRC. It all started with a vendor briefing with a… Continue reading Rethinking GRC

  • Tracking Change that Impacts Policy

    In the time it takes you to read this article your business has changed. The economic environment has changed, your employees have changed, and there are constant changes to technology,… Continue reading Tracking Change that Impacts Policy

  • Effective Policy Management

    From time to time, to my surprise, I still hear people asking why policies matter. After all, they argue, aren’t the laws and regulations we have to follow enough guidance?… Continue reading Effective Policy Management

  • GRC Flexibility and Efficiency through Mobile Audits and Assessments

    The dynamic and global nature of business is challenging organizations to effectively and efficiently implement processes for governance, risk management, and compliance (GRC). As organizations expand operations, processes, locations, and… Continue reading GRC Flexibility and Efficiency through Mobile Audits and Assessments