A GRC implementation includes one or more parts of a GRC framework. This can be both organizational and procedural measures such as the implementation of software. In addition to the installation and provisioning of GRC software, it is important that the existing processes are analysed and the proper preparation is made here. Checks on the basis of a risk analysis should be determined and implemented as part of a control framework. Important part of this is the set up of segregation of duties rules (ruleset) for the GRC software for the periodic monitoring based on the requirements of the organization. More information about the various components is here, on our site. 2ARC has a lot of experience with GRC deployments.
Interested in? Please contact us!