Get the latest delivered to your inbox
Privacy Policy

Now Reading

Survey Reveals Fragmented Governance, Risk and Compliance Efforts Can Thwart Companies From Achieving Business Goals

Survey Reveals Fragmented Governance, Risk and Compliance Efforts Can Thwart Companies From Achieving Business Goals

Published 09-27-07

Submitted by Deloitte

NEW YORK - September 27, 2007 - Most companies acknowledge the high cost and risks of fragmented governance, risk, and compliance (GRC) efforts, yet few have taken action, according to the 2007 Open Compliance and Ethics Group (OCEG) GRC Strategy Survey released today.

"The survey revealed a higher degree of dissatisfaction and pain associated with current GRC approaches than we expected to find," said Lee Dittmar, a Principal with Deloitte Consulting LLP, a primary sponsor of the survey. "However, while respondents recognized the need to reduce unnecessary complexity and better integrate their risk and compliance needs with mainstream business processes, a relatively few have taken action to address the problem."

The key findings of the 2007 OCEG GRC Strategy Survey include:

  • 84 percent reported fragmentation of GRC activities and processes.

  • 65 percent claimed fragmented GRC caused serious business problems through duplication of efforts, redundant solutions, higher costs, and increased risk.

  • 75 percent would scrap their current programs and start over if possible.

  • 71 percent that acted on integration opportunities realized benefits that met, or exceeded company expectations.

    "Organizations want and need comprehensive frameworks and enterprise solutions to address governance, risk, and compliance challenges," said Scott Mitchell, OCEG Chairman and CEO. "This survey supports what we have learned from members of the OCEG community over the past several years. It is this demand that has driven OCEG's work to develop the OCEG Framework and extensive database of guidance, standards, and resources. We expect the other parts of our 2007 benchmarking series (still in progress) to provide additional insight about how organizations are addressing risk assessment, training, and other key GRC capabilities."

    Approximately 250 organizations from more than 15 countries, representing a broad range of industries, participated in the OCEG survey sponsored by Deloitte Consulting LLP, SAP, and Cisco.

    For more on the survey's key findings or to recieve a copy of the report, please go to www.deloitte.com/us/GRCStrategyStudy.

    About OCEG

    OCEG is the only nonprofit organization offering comprehensive guidance, standards, benchmarks and tools for integrating governance, risk management, internal control and compliance (GRC) processes. Our unique platform and organizational structure helps you take advantage of contributions from thousands of experts and companies - many of them just like yours. Our guidance, benchmarking, custom tools and communities of practice help you drive principled performanceâ„¢. www.oceg.org

  • Deloitte logo

    Deloitte

    Deloitte

    "Deloitte" is the brand under which 165,000 dedicated professionals in independent firms throughout the world collaborate to provide audit, consulting, financial advisory, risk management, and tax services to selected clients. These firms are members of Deloitte Touche Tohmatsu ("DTT"), a Swiss Verein. In the United States, Deloitte LLP is the member firm of DTT. Like DTT, Deloitte LLP does not provide services to clients. Instead, services are primarily provided by the subsidiaries of Deloitte LLP, including Deloitte & Touche LLP, Deloitte Consulting LLP, Deloitte Financial Advisory Services LLP and Deloitte Tax LLP.

    Corporate Responsibility at Deloitte starts with the shared values that form the foundation of our culture: integrity, outstanding value to markets and clients, commitment to each other, and strength from cultural diversity. The focus areas that make up Corporate Responsibility at Deloitte include Ethics & Compliance, Talent, Community Involvement, Sustainability, Internal Operations, as well as the services we provide clients.

    As used in this profile, "Deloitte" means Deloitte LLP. Please see www.deloitte.com/about for a detailed description of the legal structure of Deloitte LLP and its subsidiaries. Deloitte.com

    More from Deloitte

    Join today and get the latest delivered to your inbox