Integrity-Driven Performance. New Strategy for ... - GRC Resource

PricewaterhouseCoopers’ GRC Operating Model is designed to provide a best-practices roadmapto help organisations envision, improve, operate and sustain a GRC capability aligned with theirvision and objectives, and to help demonstrate value and performance to key stakeholders. Itrepresents a broad view of GRC capabilities critical to success across the enterprise – as opposedto functions within the enterprise. While organisational impacts are important to understand andaddress, the GRC Operating Model is not just about organisation. It is about aligning businessprocesses and technology with the appropriate organisational construct and culture in a way thatis consistent with the organisation’s overall strategy and its GRC objectives.The GRC Operating Model, shown in Figure II-3, provides organisations with an organised, end-to-endapproach for identifying, integrating and effectively managing key GRC activities. It is designed tohelp organisations achieve integrity-driven performance through the strategic deployment andmanagement of resources, processes and technology. The model is scalable and applies to theenterprise as a whole. It can also be adapted to add value to a business unit or function across theenterprise, or to address objectives in one specific GRC area (e.g., Sarbanes-Oxley compliance,code-of-conduct compliance or privacy compliance).Figure II-3: PricewaterhouseCoopers’ Governance, Risk & Compliance Operating ModelGovernance, Risk & Compliance Operating Model EnvisionAssessImproveDeployOperateMonitorSustainReviewVision &BusinessObjectivesSet ObjectivesInformation &CommunicationPlanDevelopInformation &CommunicationChangeExecuteInformation &CommunicationRespondReportInformation &CommunicationAdaptPeopleProcessTechnology11