GRC Assessment Framework™

More than 20 years ago, the OCEG™ Community created GRC and Principled Performance® and formalized these ideas into a structured model called the GRC Capability Model™ (“OCEG™ Red Book”). Shortly thereafter, the community created the GRC Assessment Tools™ (“OCEG™ Burgundy Book”) to help individuals measure the design and operating effectiveness of each aspect of the GRC Capability.

We have updated the Burgundy Book and formally renamed it as the GRC Assessment Framework™. For this update to Version 3.5.1, the objectives were to:

● Align - Align with the updated GRC Capability Model™ 3.5.

● Simplify - Make them easier to understand, navigate and use.

● Clarify - Untangle and elaborate key concepts and definitions.

This is a substantial revision, and we recommend that it be reviewed by everyone, including those who previously earned the GRCA™ designation.

OCEG™ encourages those intending to use the Burgundy Book for assurance reports to obtain the OCEG™ GRC Auditor™ (GRCA™) certification, which demonstrates an understanding of these procedures and the GRC capabilities to which they are applied. In-house GRC professionals using the Burgundy Book also should obtain the GRC Professional™ (GRCP™) certification.

Also available in Arabic

Related Resources