Thought Leadership of the Week

Risk Management in the Age of Structured Products
Free White Paper, Courtesy of Deloitte

Upcoming Webcasts

GRC Controls to Run Your Business Better
Jan. 22, Free, Sponsored by Oracle

The Resource Exchange

Disclosure Controls Process Map
Submitted by Anonymous Company

Internal Control Questionnaire
Submitted by Candela Laser

Featured Databases

Sustainability Reports
Review Corporate Sustainability Reports

Codes of Business Conduct
Database of 1,000+ Mission/Conduct Statements

Compliance Week “Twitters”

Get the Latest Compliance Updates via Twitter
Available Via Cell, Online, Email

GRC Illustrated Series

A Federated Approach to Policy Management
The 19th Installment in This Exclusive Series
Exclusive: ‘GRC Illustrated’ Series

Compliance Week and the Open Compliance and Ethics Group—a nonprofit organization that helps companies align their governance, risk and compliance activities to drive business performance and promote integrity—have begun collaboration on a regular series called “GRC Illustrated.”

ILLUSTRATIONS
GRC Illustrated: View The Series:



Part I: How Do We Align Our GRC Initiatives?

Part II: Making The Business Case For GRC

Part III: Using Technology To Build GRC

Part IV: Conducting Risk Assessments

Part V: Controls, Policies & Procedures

Part VI: Automated Controls And Risk Management

Part VII: Privacy And Data Protection Risks

Part VIII: Leveraging Controls For Op. Benefits

Part IX: Mechanics Of Evaluating Effectiveness

Part X: Mechanics Of Evaluating Performance

Part XI: Design and Manage Codes of Conduct

Part XII: Conducting Internal Investigations

Part XIII: A Global Reach for Internal Control

Part XIV: The Challenge of Capturing, Evaluating Risks

Part XV: Improving GRC Effectiveness & Reducing Costs

Part XVI: Perfecting Your IT Infrastructure, the Backbone of GRC

Part XVII: Fraud Prevention: Stop the Fraudster Before He Acts!

Part XVIII: Creating a High-Performance GRC System

Part XIX: A Federated Approach to Policy Management

The interactive series looks to provide visual representations of key governance, risk and compliance initiatives, with the ultimate goal of helping companies understand how to put principles into practice.

How It Works

Every month, Compliance Week and OCEG publish a new illustration—the illustration can be found online (see box at right), and also in the centerspread of Compliance Week’s monthly print magazine. Each illustration will be accompanied by a related column by OCEG CEO Scott Mitchell.

All illustrations that appear in print—as well as other online-only interim illustrations—will be archived at this page. In subsequent months, the illustrations will also be available at a variety of Compliance Week and OCEG events; OCEG members will also be able to find the illustrations at OCEG.org.

The Topics

The first illustration, which focuses on how companies can align their GRC initiatives, can be downloaded from the box above, right. Future illustrations will cover a variety of topics, including:

  • Making The Business Case For GRC Efforts;
  • Conducting Risk Assessment;
  • Setting Enterprise and Program Objectives;
  • Design, Implementation, and Monitoring Of Controls;
  • Event, Risk and Control Monitoring;
  • Evaluating Effectiveness Of GRC Programs;
  • Conducting Investigations;
  • Approaching Information Management;
  • Organizational Structure Of Your GRC Team;
  • Establishing The Right Culture To Take Advantage of GRC; and
  • More ...

The Source

Compliance Week and The Open Compliance and Ethics Group have worked together on several initiatives over the last few years, from OCEG’s landmark 2005 benchmarking study, to Compliance Week’s 2006 annual conference in Washington, D.C. It was at that conference that OCEG presented its first illustration, and this series was subsequently conceived.

The illustrations are designed by XPLANE, an award-winning information design firm based in Portland, Ore.

Click here for Part I in the GRC Illustrated series on integrating governance, risk and compliance initiatives.