Governance, Risk, and Compliance (GRC)

This course provides a roadmap to develop, implement and sustain an integrated GRC infrastructure to help participants implement and maintain a GRC framework. Many organizations have implemented selected components of a GRC framework, but the challenge remains to integrate the disparate components. Those attending this course will examine ways of building, sustaining, and reviewing GRC programs.

Why you should take this course

For users with an intermediate knowledge of this topic, and are searching for a deeper understanding of its evolving complexities.

Here are the topics we'll cover.

1. Overview

   • Development and Evolution of Governance Frameworks
   • The Role of Internal Audit in Governance
   • The Rise of the Frameworks
   • Pre-GRC Implementation

2. COSO Internal Control Framework

   • Objectives
   • Components and Principles of Internal Control

3. COSO Enterprise Risk Management Framework

   • Risk Management Components
   • Risk Management Principles

4. Effective Compliance and Ethics Programs

   • Why It Matters
   • What is an Effective Program?

5. GRC Overview

   • Principled Performance
   • What is GRC? What Does it Look Like?

6. GRC Capability Model Element View

   • Elements of GRC

7. Component 1 – Learn

   • External Context
   • Internal Context
   • Culture
   • Stakeholders
   • Considerations

8. Component 2 – Align

   • Direction
   • Objectives
   • Identification
   • Assessment
   • Design
   • Considerations

9. Component 3 – Perform

   • Controls
   • Policies
   • Communication
   • Education
   • Incentives
   • Notification
   • Inquiry
   • Response
   • Considerations

10. Component 4 - Review

    • Monitoring
    • Assurance
    • Improvement
    • Considerations

11. Wrap Up

    • Post GRC Implementation
    • Alignment of Frameworks
    • GRC Technologies
    • Resource