Integrity-Driven Performance. New Strategy for ... - GRC Resource

Improve and Measure SuccessDevelop, Deploy, ChangeM E A S U R E M E N TTechnologyEnablement&Engineeringof GRC Model& ControlActivitiesI M P R O V E M E N TChangeManagement& LearningProcessImprovementProgrammePlanning &ManagementPerformanceMeasurementEnvisionAssessImproveDeployOperateMonitorSustainReviewVision &BusinessObjectivesSet ObjectivesInformation &CommunicationPlanDevelopInformation &CommunicationChangeExecuteInformation &CommunicationRespondReportInformation &CommunicationAdaptPeopleProcessTechnologyHaving successfully envisioned its target GRC environment, the organisation turns to improvementand bringing the vision to life. In the Improve activity, the organisation focuses on tactical engineeringof its programme and alignment of organisational culture, processes, technology and other resourcesto GRC priorities. In the broadest sense, the enterprise develops its GRC programme, deploys itsresources to their highest and best use, and effectively manages change. Specifically, the enterpriseconsiders and undertakes a host of tactical improvements and measurement activities that will becritical success factors for achieving the GRC vision. These include identifying the people, processand technology changes required to achieve the desired state, as well as gauging the likely areasof resistance to that change and developing a strategy to deal with that resistance.The GRC Operating Model advocates effective change management across the organisation’speople, processes and technology. This requires that the right values and culture should beembedded in the organisation; roles and responsibilities should be clearly understood; andbusiness process and technology change should be managed to ensure that it operates effectively.Programme planning and management are critical, as the enterprise needs to prioritise GRCimprovement projects and proactively manage its GRC project portfolio to help ensure that itsobjectives are successfully achieved.42