Governance, Risk, and Compliance (GRC)

This course provides a roadmap to develop, implement and sustain an integrated GRC infrastructure to help participants implement and maintain a GRC framework. Many organizations have implemented selected components of a GRC framework, but the challenge remains to integrate the disparate components. Those attending this course will examine ways of building, sustaining, and reviewing GRC programs.

Why you should take this course.

For users with an intermediate knowledge of this topic, and are searching for a deeper understanding of its evolving complexities.

Here are the learning objectives we'll cover.

• The learner will be able to develop internal audit procedures in alignment with GRC capabilities.
• The learner will be able to define and describe various governance frameworks that help organizations mitigate risks and achieve objectives.
• The learner will be able to identify, describe, and apply the components and elements of the GRC Capability Model.
• The learner will be able to outline various considerations and practices for the individual elements of the GRC Capability Model.
• The learner will be able to locate and access supplemental resources on GRC and other governance frameworks.

Here are the topics we'll cover.

1. Overview

   • Development and Evolution of Governance Frameworks
   • The Role of Internal Audit in Governance
   • The Rise of the Frameworks
   • Pre-GRC Implementation

2. COSO Internal Control Framework

   • Objectives
   • Components and Principles of Internal Control

3. COSO Enterprise Risk Management Framework

   • Risk Management Components
   • Risk Management Principles

4. Effective Compliance and Ethics Programs

   • Why It Matters
   • What is an Effective Program?

5. GRC Overview

   • Principled Performance
   • What is GRC? What Does it Look Like?

6. GRC Capability Model Element View

   • Elements of GRC

7. Component 1 – Learn

   • External Context
   • Internal Context
   • Culture
   • Stakeholders
   • Considerations

8. Component 2 – Align

   • Direction
   • Objectives
   • Identification
   • Assessment
   • Design
   • Considerations

9. Component 3 – Perform

   • Controls
   • Policies
   • Communication
   • Education
   • Incentives
   • Notification
   • Inquiry
   • Response
   • Considerations

10. Component 4 - Review

    • Monitoring
    • Assurance
    • Improvement
    • Considerations

11. Wrap Up

    • Post GRC Implementation
    • Alignment of Frameworks
    • GRC Technologies
    • Resource