Principled performance is all about being able to reliably achieve objectives while addressing uncertainty and acting with integrity. You need to address threats, opportunities, and requirements by encouraging desired conduct and conditions and preventing what is undesired. Performing the right management actions and controls over business operations, risk, and compliance is essential.

But what is the right mix of proactive, detective, and responsive controls? How do you determine priorities for limited resources and establish the right layering of controls? What can you learn from advanced analytics in your GRC capabilities?

These are just some of the questions addressed in OCEG's latest infographic, which focuses on the “Perform” component of the new GRC Capability Model (Red Book 3.0).