I would like to share some thoughts and tips today regarding our recently released Tasks component.

When dealing with GRC, you never know which resources and strategies will be utilized during the management of the next compulsory regulation. C’est la vie, as they say.

For this reason specifically, we have redesigned the Tasks component within easy2comply to add flexibly and support to any work flow process. Moreover, we improved the usability, while adding some other cool features.
Click to continue »

Until today, whenever you wanted to obtain the  approval of process documentation  by the owners, you needed to produce a report, send it to the owner, and make sure they understand the report structure, content and the description of the process under their responsibility.

Many of our clients asked for a clever feature that will allow you to automatically send the processes to their owners based on the definition you made.

In our latest release 4.7.0, we are proud to deliver our new “Sign-Off” feature. This is a new enhancement that will send (via mail) to each owner their responsibilities for signing. The functionality will require them to read the signing statement and approve it digitally. This feature is not limited to the approval of processes. It also covers organizational units, computer systems, controls, and risks.  The feature can be used to have multiple people in the organization reviewing the information.

Click to continue »

Sounds ridiculous? You’d be right in thinking so, however this was a question I was asked last week as part of a workshop focusing on Risk Identification.

These questions never surprise me. In fact, I look forward to them being asked because it creates an opportunity to engage with participants on a topic that all of them could understand, but few of them do.

What is a risk? And which risks do I need to be taking seriously?

Click to continue »

First of all, yes!!!

But the question is, “Is it that simple?”

Well, that depends on whether you have a clear view on what GRC automation is all about.

Before we start, this post is not intended to warn organizations away from getting into projects that involve automation. I categorically state, GRC automation is blessed, and its achievement should be analyzed. But you should make yourself aware of the challenges you will face and how to approach such a project. Click to continue »

Background

Risk Management, Compliance and Govenrnace reforms that followed the corporate failures of the past decade have dramatically changed today’s business environment. Organizations worldwide are coping with a proliferation of new regulations and standards, and are challenged to do so in a way that supports performance objectives, upholds stakeholder expectations, sustains value and protects the organization’s brand.

Recent studies indicate that Fortune 1000 corporations are subject to 35-40 different regulatory mandates and the management of regulation and compliance has become a serious risk factor in itself.  Complying with each individual regulation is always complicated, lengthy and costly.   Managing the burden of complying with multiple and overlapping regulations is becoming increasingly difficult and expensive. The need for an integrated GRC (Governance, Risk Management and Compliance) platform in today’s business environment is obvious.  Despite the hype around this topic, only few organizations have succeeded in implementing a truly integrated GRC platform due to the complexity of the GRC environment.

Click to continue »