Best Practices for GRC

• Date: December 03, 2009
• Source: www.esj.com

GRC is fast becoming key to any enterprise strategy. However, organizations are overlooking the difference between GRC as applied to business and as applied to IT. IT GRC focuses on security & general computer controls and privileged user access.

GRC as applied to business focuses on elements like business processes which include business level controls, application level controls and policies and audit reporting needed for internal and external auditor compliance report filing. It also applies to risk management and executive guidance assistance to provide directional analysis and recommendations.

Understanding these differences helps eliminate common GRC mistakes.