ANX Corporate Blog: Posts tagged as GRC

Showing 6 through 10 of 10 total posts

Dec 16th 2010, 09:31

What 2011 Holds in Store for Your GRC Program – Five Predictions | Prediction #4

Posted by Chris Noell
What does 2011 hold in store for your GRC program? My first three predictions were:
Prediction #1: Greater Focus on Risk Management CapabilitiesPrediction #2: Redeployment of Internal ResourcesPrediction #3: Self-Service for Greater Efficiency
Read below for my fourth prediction for 2011 GRC programs.
Prediction #4 | Increase Use of Contract / Vendor Management
As regulatory requirements expand, usage of the ‘cloud’ and SaaS technologies grows, and the number of obligations imposed by business partners increase, 2011 will show that leading organizations will need to utilize an enterprise-wide vendor risk management process and control library.  I believe we will see an upward trend in organizations using standard vendor assessments and

Comment BubbleComments (0)

Dec 14th 2010, 11:53

What 2011 Holds in Store for Your GRC Program – Five Predictions | Prediction #3

Posted by Chris Noell
What does 2011 hold in store for your GRC program? My first two predictions were:
Prediction #1: Greater Focus on Risk Management CapabilitiesPrediction #2: Redeployment of Internal Resources
Read below for my third prediction for 2011 GRC programs.
Prediction #3 | Self-Service for Greater Efficiency
GRC staff such as risk, compliance, internal audit, and security personnel define the rules of the game and referee but line managers execute the majority of GRC activity.  In 2011, leading organizations will empower line managers with the technology and corporate-approved processes and content they need to plan and execute their own GRC initiatives, ultimately reducing the cost of GRC and blending it more seamlessly with the organization.
I believe that

Comment BubbleComments (0)

Dec 9th 2010, 09:16

What 2011 Holds in Store for Your GRC Program – Five Predictions | Prediction #2

Posted by Chris Noell
What does 2011 hold in store for your GRC program? My post on Tuesday, December 7th, defined my first prediction - Greater Focus on Risk Management Capabilities.
Read below for my second prediction for 2011 GRC programs.
Prediction #2 | Redeployment of Internal Resources
According to recent studies, risk and compliance functions spend the majority of their time on tactical administrative tasks. Indeed, studies show that as much as 62% of effort is spent on data collection versus 36% on analytics/risk mitigation, and 2% on other tasks. 
I’ve found that when tactical activities dominate a program, there are 3 main issues that arise – audit fatigue, low value outcomes, and low level of executive participation.
Audit fatigue: Let’s

Comment BubbleComments (0)

Dec 7th 2010, 09:50

What 2011 Holds in Store for Your GRC Program – Five Predictions | Prediction #1

Posted by Chris Noell
It’s certainly not news that 2010 has been a tough year for organizations looking to establish and maintain an effective GRC program as they face the ongoing challenges of balancing GRC obligations with budget and resource constraints.  In 2011, as the number of applicable regulations and standards increase and organizations look to protect themselves against security breaches, I expect the importance of GRC to increase in the coming year. 
So, where should your organization start? Over my next five blogs posts, I will share my five predictions for what 2011 holds in store for your GRC program.
Prediction #1 | Greater Focus on Risk Management Capabilities
Although many pundits have predicted more focus on risk management for years, in my discussions

Comment BubbleComments (0)

Nov 29th 2010, 10:18

TruArx GRC Expert to Speak at MIS Training Institute GRC 2010 Conference

Posted by Julie Pham
Steve Akers, Director of Managed Risk and Compliance Services, to join GRC thought leaders in the Next Generation of GRC Products and Services Panel Discussion
Farmington Hills, MI – November 29, 2010 – TruArx®, a leader in cost-effective, easy-to-implement governance, risk and compliance (GRC) solutions, today announced that Steve Akers, director of managed risk and compliance services, will be speaking at the MIS Training Institute (MISTI) GRC 2010 Conference. Beginning November 30th at the Omni Berkshire Place Hotel in New York City MISTI GRC 2010 is an exclusive two-day training conference covering essential components of a successful GRC strategy.

“Ensuring that security professionals are able to leverage the best tools and services

Comment BubbleComments (0)