The Role of Technology in GRC

Email     |     Share  
1 | 2 | 3 | 4 | 5 | 6 | 7
Previous Next

Click through for five ways technology can enable and support GRC, as identified by MetricStream.

The basic concept of GRC (governance, risk and compliance) is simple – (1) say what you need to do and make sure everyone knows about it, (2) make sure you proactively look at risks, and put controls in place to mitigate the risks, and (3) monitor the controls you put in place to make sure they are working. In other words, put objectives and policies in place to reflect your strategy and regulatory commitments; periodically review the related risks; ensure that controls are in place, and audit the controls.

Say you work for 'The Wide World of Bananas, Inc.' growing and shipping bananas. Now, when everyone in your company knows why they are peeling bananas, which bananas they should peel, where the fallen peels are, and then consistently walks around them (or picks them up and tosses them into the trash bin) … then you have a company that is shipping a lot of high-grade bananas without falling down too often. Better GRC means better business. Easy.

Of course, growing and shipping bananas is not really that simple. You probably have your own banana plantations, and source some other bananas from third parties. You probably have a facility where you wash and shine all those bananas. You most likely ship those bananas to other countries. There is the IT department, for any self-respecting banana shipper needs 'Big Data' and iPads … and let's not forget the bean counters who really are counting bananas in this case.

In reality, any business looks somewhat like the banana business - with suppliers, suppliers' suppliers, facilities, manufacturing, R&D, quality, IT, finance, HR … and lots of people. And let's not forget all the regulations! Financial reporting regulations, export regulations, data privacy regulations, health and safety regulations … there's probably a good reason behind each and every one of them. Clearly the business of doing business is not simple, and if we are to achieve any measure of success by applying GRC across the board, we need technology. Here's how technology can enable and support GRC, as identified by Vasant Balasubramanian, MetricStream's vice president of product management.

 

Related Topics : A Big Market for Big Data Jobs, Midmarket CIO, IT Management Automation, SharePoint, Technology Markets

 
More Slideshows

ContinuumOpenSource0x 5 Ways to Solve the Open Source Industry's Biggest Problems

Five challenges preventing enterprise IT from shifting to open source and tips for tackling them to keep the future of open source heading in the right direction. ...  More >>

IT_Man83-190x128 How Developers Balance Speed and Quality

How does Dev balance the pressure for speed with the need to ensure quality? Here are a few best practices for striking an appropriate balance to ensure that speed and quality is not an either/or choice. ...  More >>

IT_Man82-190x128 5 Characteristics Professional IT Consultants Must Possess

Choosing the right consultant can make all the difference in whether a project succeeds or fails spectacularly. It is, therefore, essential that organizations take a close look at potential partners. ...  More >>

Subscribe to our Newsletters

Sign up now and get the best business technology insights direct to your inbox.