The Network Policy Management
- IT.22 - Policy Mgmt, Communication & Training
- M1. Context Monitoring
- P1. Proactive Actions & Controls
- I2. Communication
- M2. Performance Monitoring
- P2. Codes Of Conduct
- C3. Culture
- M3. Systemic Improvement
- P3. Policies
- R3. 3rd Party Inquiry & Investigation
- M4. Assurance
- P4. Education
- P5. Incentives
The Network Reporting & Analytics
- IT.05 - Compliance Management
- IT.07 - Control Activity, Monitoring, and Assurance
- IT.13 - Fraud and Corruption Detection, Prevention & Mgmt
- IT.15 - Hotline/Helpline
- IT.17 - Insurance & Claims Management
- IT.19 - Issue and Investigations Management
- IT.20 - Matter Management
- IT.21 - Physical Security & Loss Management
- IT.22 - Policy Mgmt, Communication & Training
- IT.27 - Strategy, Performance, and Business Intelligence
- D1. Detective Actions & Controls
- I1. Info Management
- M1. Context Monitoring
- O1. Commitment
- M2. Performance Monitoring
- D3. Inquiry
- I3. Technology
- M3. Systemic Improvement
- M4. Assurance
Learn from the experience of others and share your experience! blog
Have you ever asked your peers or professional colleagues what risk management or compliance tools they use? We value the ground well tread because we know that learning comes from making mistakes. How would you like to know what 1000's of your peers are saying about GRC ven
SAI Global GRC Software
SAI Global’s GRC Platform provides a flexible software solution to manage and profile risks, compliance obligations, incidents and cases, policies, and learning across the organization. Specific applications include configurations for environmental, health and safety use and for bribery and corruption risk management. A full utilization of SAI Global's software enables integration with SAI Global's Learning & Communication Platform and a single view across highly decentralized global operations. This inevitably results in better use of human capital, reduced costs, increased transparency and improved business results. A partial list of solution components, deployable as standalone elements or integrated, include risk assessment and profiling; obligations management; case and incident management; policy management; registries to manage gifts, hospitality, entertainment, facilitation payments and conflicts of interests; audit management; integration with hotline; and a fully configurable GRC Dashboard that integrates with learning and communication.
- IT.02 - Board and Entity Management
- IT.05 - Compliance Management
- IT.11 - Environmental, Health, and Safety
- IT.14 - Global Trade Compliance/International Dealings
- IT.15 - Hotline/Helpline
- IT.19 - Issue and Investigations Management
- IT.22 - Policy Mgmt, Communication & Training
- IT.23 - Privacy Management
- IT.26 - Risk Management
- IT.26 - Regulatory Intelligence and Monitoring
- IT.28 - 3rd Party/Vendor Risk & Compliance
- (C) Context
- M1. Context Monitoring
- P1. Proactive Actions & Controls
- R1. Responsive Actions & Controls
- D2. Notification
- M2. Performance Monitoring
- P2. Codes Of Conduct
- R2. Internal Investigation
- D3. Inquiry
- P3. Policies
- R3. 3rd Party Inquiry & Investigation
- M4. Assurance
- P4. Education
- (O) Organize
- (A) Assess
- (I) Interact
Regulatory Intelligence by Michael Rasmussen: an Axentis Thought Leadership White Paper resource White Papers Member contributionOCEG Reviewed
"The old paradigm of regulatory change management is clearly a recipe for disaster given the volume, pace of change
EPA, Clean Water Act Compliance Assistance resource Agency Web Sites OCEG Reviewed
This Web site focuses on EPA's compliance assistance tools supporting the Clean Water Act. It enhances the access to water-related environmental compliance assistance by providing links to documents, tools, information and other related and linked Web sites for compliance with environmental requirements to protect water resources.
Preventing Workplace Violence - A "Catch-22" for Employers (June 2010) resource Articles
This article discusses conflicting duties faced by employers, factors that should be considered to anticipate, avoid and respond to this threat, and the development of an effective workplace violence prevention program.
Posted at mondaq.com (Free registration required.)
Article by Daniel B. Klein and Mark A. Lies II, 24 June 2010
SAS Institute, Inc. Technology Provider
Why is GRC important? blog
I have been blogging about what GRC is, advocating the definition developed by the Open Compliance and Ethics Group, OCEG (see this and subsequent posts). But, I haven’t really talked about why the concept of GRC has value.




