How GRC Will Drive Business Performance Management
Share this Article
Twitter
Delicious- Digg
Stumble
Reddit
Tags:
compliance data governance IT risk managementWhile many have claimed the GRC added little more than overhead to the business, it’s fair to say that most businesses are better run today because of regulations than they were at the beginning of 2001.
Unfortunately, during the last decade GRC bifurcated into two distinct sets of disciplines. There were various GRC platforms focused on financial controls and a completely different set of tools for managing IT as it related to GRC.
But at the start of 2011, Scott Wisniewski, director of Risk Technologies at Protiviti, a global risk and business consulting company, says it’s clear how these two different GRC disciplines are not only starting to converge, but also how GRC data is going to be used to proactively manage the business.
What most companies have begun to discover, says Wisniewski, is that you can’t have a GRC event that doesn’t involve IT. As a result, there is a bigger push to provide federated frameworks for GRC that will make it easier to tie an IT event to a specific financial risk and vice versa.
This “continuous” approach to GRC will also then create streams of data that can be fed into dashboards that business users will be able to access in order to proactively manage the business, says Wisniewski. Ultimately, that data will also be fed into a variety of analytics and business intelligence (BI) applications, which will automatically trigger specific actions and events once a certain business threshold is reached.
In effect, Wisniewski says that GRC is well on its way to becoming a business performance management tool. Of course, most companies still have a long way to go before they make the leap from trying to manage a myriad of GRC controls to actually proactively running the business based on the data those controls gather. But it’s also plain to see how GRC, security, data management, systems management tools and BI software are about to converge into something that truly is greater than the sum of the parts.
By Michael Vizard, from: http://www.itbusinessedge.com/cm/blogs/vizard/how-grc-will-drive-business-performance-management/?cs=45065
Mike Vizard has been covering IT issues in the enterprise for 25 years as an editor and columnist for publications such as InfoWorld, eWeek, Baseline, CRN, ComputerWorld and Digital Review.
