

Upcoming Events . . .
Latest Pontifications & Thoughts . . .
-
The IRM Emperor (Gartner) Has No Clothes
The Gartner Integrated Risk Management (IRM) Magic Quadrant has been out a few weeks and I have been buried with inquiries from organizations asking my thoughts on it. While I… Continue reading The IRM Emperor (Gartner) Has No Clothes
-
Defining the Issue Reporting & Case Management Process
Distributed and dynamic business requires the organization to take a strategic approach to issue reporting and case management. Organizations require complete situational and holistic awareness of issues, incidents, investigations, and… Continue reading Defining the Issue Reporting & Case Management Process
-
An Enterprise Approach to Issue Reporting & Case Management
GRC 20/20 has seen many organizations take an enterprise perspective on aspects of GRC, such as Enterprise Policy Management, Enterprise Third Party Management, and, of course, Enterprise Risk Management. Over the… Continue reading An Enterprise Approach to Issue Reporting & Case Management
-
3 Key Findings from the Policy Management by Design Workshop
Policy management is a crucial component of a larger corporate governance, risk management, and compliance (GRC) program. Adherence to external regulations and instilling employee accountability starts with well-established organizational policies… Continue reading 3 Key Findings from the Policy Management by Design Workshop
-
2019 GRC User Experience Award Nominations
GRC 20/20 is accepting nominations for the 2019 GRC User Experience Awards! Governance, risk management and compliance (GRC) is a part of everyone’s job. Too often we shovel GRC into… Continue reading 2019 GRC User Experience Award Nominations
-
Improving Policies Through Metrics
It is unfortunate that many policies are written and then left to slowly rot over time. What was a good policy five years ago may not be the right policy… Continue reading Improving Policies Through Metrics
-
Policy Management Requires Attention
Policies: A Foundation in GRC Strategies Policies are critical to organizations as they establish boundaries of behavior for individuals, processes, relationships, and transactions. An organization must establish policy it is… Continue reading Policy Management Requires Attention
-
Why it Makes Sense to Manage Retention with Privacy and GDPR
There is increasing focus on the protection of personal identity information around the world. Over the past two decades, we have seen increasing regulations such as US HIPAA, US GLBA,… Continue reading Why it Makes Sense to Manage Retention with Privacy and GDPR
-
GDPR in Third Party Relationships Stretches Resources
As the years go by, there is increasing focus on the protection of personal identity information around the world. Over time we have seen new regulations such as US HIPAA, US GLBA,… Continue reading GDPR in Third Party Relationships Stretches Resources
-
Internal Control Management by Design
Business is complex. Exponential growth and change in regulations, globalization, distributed operations, changing processes, competitive velocity, business relationships, disruptive technology, and business data impedes organizations. Keeping complexity and change in… Continue reading Internal Control Management by Design
-
Critical Capabilities & Considerations for Evaluation of Policy & Training Management Platforms
I get a lot of inquiries from organizations looking for policy management platforms. Some for a department focused need (e.g., IT security, health and safety, Human Resources), others for a… Continue reading Critical Capabilities & Considerations for Evaluation of Policy & Training Management Platforms
-
How Technology Enables Enterprise Risk Management
Risk management fails when information is scattered, redundant, non-reliable, and managed as a system of parts that do not integrate and work as a collective whole. The risk management information… Continue reading How Technology Enables Enterprise Risk Management