Certified GRC Professional

Introduction

An integrated organisational approach promotes appropriate risk identification and the collation of information for decision-making at the highest levels, with audit committees demanding insight into business risks and compliance obligations, how these are being managed and assurance over the key business risks.

Viewed at a strategic level, GRC can enable information provision that supports organisational performance and adaptability within increasingly changing markets.

Many organisations continue to face difficulty arising from fragmentation across risk, compliance and assurance activities that are integral to the GRC environment.

A common approach to risk identification and assessment that is driven from a strategic level ensures an effective approach to GRC that is aligned to the organisational strategy.

Target audience

• Internal auditors; Compliance and Governance professionals
• Risk management professionals; GRC professionals; Legal professionals
• IT professionals dealing with GRC; Managers responsible for GRC activities
• Executives and board members

Course benefits (Course participants will achieve the following objectives :)

• Develop a GRC strategic plan; Align governance, risk and compliance in context of the organisation; Understand technology’s role in GRC
• Understand, define, and enhance organisational culture as it relates to performance, risk, and compliance
• Implement effective, efficient &agile GRC processes using the OCEG GRC Capability
• Motivate and inspire desired conduct through the concept of Principled Performance
• Develop on-going monitoring and continuous improvement of GRC activities through metrics and measurement
• How to explain the value of Principled Performance, and an integrated approach to GRC, to your management and board

Training Methodology

The course incorporates short inspiring lectures, with practical examples and workshop case studies for delegates to apply the principles to their organization.

The Instructor also uses tools and aids such as PowerPoint Slides and course documentation on the topics and application, and ample time for Q & A.

All of the training activities, interaction and workshop case studies will be implemented within a friendly and enthusiastic environment where the client’s needs come first.

Course Outline

Introduction to SQL Course Outline

Introduction

• Introduction
• Introduction to OCEG
• The use of frameworks
• Available GRC individual certifications
• Business context and the need for a GRC approach  and Principled Performance
• The “Big” picture of business illustration
• Defining Principled Performance
• Advantages of Principled Performance

Governance, Risk Management & Compliance Basics Module

• Defining common GRC terms
• GRC concepts
• GRC roles and responsibilities (e.g. audit, legal, human resources, IT, compliance, risk management, ethics, the boards, etc.)
• Gaining commitment from senior management and the board
• Overview of the OCEG GRC Capability Model
• Implementing the OCEG GRC Capability Model at an organisation

Learn Component

•  Understanding the external context of your organisation
• Understanding the internal context of your organisation
• Understanding and assessing culture
• Understanding relevant stakeholders and developing  a stakeholder relations plan

Align Component

• Setting direction and management decision-making criteria in accordance with mission, vision and values
• Defining high-level and lower-level objectives
• Identifying opportunities, threats and requirements  for your organisation
• Assessing levels of reward, risk and compliance – inherent and residual basis
• Designing relevant actions and controls in order to respond to levels of reward, risk and compliance

 Perform Component

• Determining the right mix of proactive, detective, and responsive internal controls
• Developing relevant policies and procedures
• Providing communication to the right people, in the right way, at the right time
• Delivering education to relevant individuals
• Designing and implementing appropriate incentives
• Designing notification methods to detect desired and undesirable events
• Designing inquiry methods to detect desired and undesirable events
• Responding to desired and undesirable events

Review Component

• Monitoring the GRC capability
• Providing assurance on the GRC capability
• Making improvements to the GRC capability

 GRC Strategy

• Elements of a GRC strategic plan
• Completing risk and compliance assessments as a starting point

- Fraud risk assessment

- Organisational risk assessment

- Compliance gap analysis

• Moving from the current state to desired state
• Degrees of integration and maturity models
• Building and explaining the business case for integrated GRC