SAP Process Control

During a breakfast event few months ago – back when it was still possible, I was having coffee with two security managers who were in charge of business continuity for their organizations: one was from the IT department and the other one was... Read More »

Language and terminology is always a key starting point when companies decide to harmonize their risk and control process and break departmental silos. Having a standard set of definitions for what a risk is, what a control is, what different... Read More »

Unternehmerische Compliance ist heute ein „Muß“. Es gibt verschiedenste Regulative, mit denen sich Unternehmen heute auseinanderzusetzen haben. Diese Regulative sind auch global stark variierend, es werden alternative Personen und Abteilungen... Read More »

Unless you have been hiding under a rock for the past 20 years, if you are working in or with the banking industry, or have simply been interested in risk management, then you will surely have heard of the Basel Accords (Basel I, Basel II and of... Read More »

  My colleague Thomas Frenehard has already written an excellent overview of the IIA update to the Three Lines Model, and I wanted to add some of my own overlapping thoughts. I looked at the updated Three lines model diagram with interest... Read More »

  Some say that next-generation Governance, Risk, and Compliance – or GRC – tools will be available very soon. That’s only partially true. Some of it is already available today. No need to wait! As I am sure you will agree, Governance,... Read More »

Before reading this blog, ask below questions. Can you get Z process details in 15 minutes from the system for all modules? Are Z process unorganized in system? Are Errors for Z process not captured since inception of program? Documents related to... Read More »

When the Three Lines of Defense Model started to get traction within companies a few years ago, I was often asked to explain how software could support the process better, and sometimes even what it really meant for control, risk and audit... Read More »

The changing business processes have been posing complex challenges that demand considerable labor and OPEX to organizations. However, organizations hope that the growth of digital transformation models could make a difference. But it couldn’t... Read More »

If you have been following this GRC Tuesdays blog space, you will already know that I have recently discussed anti-fraud and anti-bribery & corruption programs, including how to automate them. You will also have noticed that, on a separate... Read More »