CSR Event

OCEG Webinar Series: How Do We Measure the Performance of GRC?

A high-performing GRC system will always deliver value. Always. The value of an activity or department is directly related its contribution to business objectives. For that reason, it is not sufficient to focus on measuring GRC activities themselves (e.g., risk assessment, policy management, training and communication, control management). Rather, special focus must be on the desired system outcomes that result from those activities.

Each organization is unique, of course, and pursues unique business objectives. In turn, each GRC system will pursue a unique set of outcomes. However, surveys of experts and analysis of compliance, internal control, and risk management charters suggest that most organizations share several desired outcomes that appear to be universal across GRC systems.